Search results | European Data Protection Board

Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
19 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Estonia 19 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … FOR DATA PRIVACY AND FREEDOM OF INFORMATION 1 (2) … assessment In case of cross-border data processing (see GDPR art. 35 (6)), the aspect of large scale processing …
Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Croatia 26 July 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … REPUBLIC OF CROATIA PERSONAL DATA PROTECTION AGENCY … FOR WHICH A DPIA SHALL BE REQUIRED PURSUANT TO ARTICLE 35.4 GDPR Having regard to the EDPB Opinion 25/2018 on the draft …
Latvia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
14 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Latvia 14 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Approved by December 18, 2018 Order No. 1-2.1/125 … impact assessment pursuant to Article 35 (4) of the GDPR Data State Inspectorate of the Republic of Latvia …
Austria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
9 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Austria 9 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 Regulation of the Data Protection Authority on … Data Protection Regulation, hereinafter referred to as the GDPR), ABl. Nr. L 119, 4.5.2016, p. 1. Processing operations …
Tetra Pak
20 August 2020
… accordance with Articles 46.1, 46.2 b, 47.1 and 47.2 of the GDPR (2016/679) and hereby approves the Controller BCRs of … to the Controller BCRs or to the other provisions of the GDPR. In accordance with Article 58.2 j of the GDPR, each concerned EU/EEA Data Protection Authority …
Liechtenstein SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
27 February 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Liechtenstein 27 February 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … DATENSCHUTZSTELLE FÜRSTENTUM LIECHTENSTEIN Version … 1 List of processing operations according to Art. 35 (4) GDPR, for which the Data Protection Authority (DSS) as the …
Slovenia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
21 December 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 Number: 014-1/2018/12 Date: 21 December 2018 … of the General Data Protection Regulation (EU) 2016/679 (GDPR) Initial statements • The list is based on Article 29 …
Poland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Poland 26 July 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … 1 The list of types of personal data processing … Data Protection Regulation), hereinafter referred to as GDPR. This list does not exempt the controller from the …
Opinion 13/2020 on the the draft decision of the competent supervisory authority of Italy regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
25 May 2020
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 25 May 2020 Opinion of the Board (Art. 64) Italy … 1 … of a code of conduct monitoring body pursuant to article 41 GDPR Adopted on 25 May 2020 2 Adopted Table of contents … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the EEA Agreement and in particular …
Opinion 06/2025 regarding the extension of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data in the United Kingdom
6 May 2025
Opinion (Art. 70)
… of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data … of the European Commission Implementing Decisions under the GDPR and the LED on the adequate protection of personal data …
Czech SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 GDPR
8 January 2020
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 GDPR Decision Type SA Czech Republic 8 January 2020 Data Protection Impact Assessment (DPIA) cz_art35-5_gdpr_list_final.pdf 427.3KB Download Opinion / Binding … of a data protection impact assessment (Article 35(5) GDPR) … Czech SAs list of the kind of processing operations …
Fujikura Automotive Europe Group (FAE Group)
29 January 2020
… Directive 95/46/EC (General Data Protection Regulation, or GDPR), and 41.2 of Organic Law 3/2018, of December 5, on … pursuant to the provisions of Article 64.1.f) of the GDPR. LEGAL GROUNDS: One. - The GDPR, in its recital 110, states that “A group of …
Internal EDPB Document 2/2020 on how to deal with complaints relating to data protection infringements started before the entry into application of GDPR that continue after 25 May 2018
30 June 2020
Internal documents
… infringements started before the entry into application of GDPR that continue after 25 May 2018 30 June 2020 Internal … infringements started before the entry into application of GDPR that continue after 25 May 2018 …
Opinion 38/2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
20 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 20 November 2021 Opinion of the Board (Art. 64) Latvia … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 36/2021 on the draft decision of the competent supervisory authority of Norway regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
30 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 30 November 2021 Opinion of the Board (Art. 64) Norway … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 35/2021 on the draft decision of the competent supervisory authority of Belgium regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
30 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 30 November 2021 Opinion of the Board (Art. 64) … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
20 July 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 20 July 2021 Opinion of the Board (Art. 64) Lithuania … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 12/2021 on the draft decision of the competent supervisory authority of Portugal regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
23 March 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 23 March 2021 Opinion of the Board (Art. 64) Portugal … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 13/2021 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
23 March 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 23 March 2021 Opinion of the Board (Art. 64) Romania … … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 19/2021 on the draft decision of the competent supervisory authority of Hungary regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
1 June 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 1 June 2021 Opinion of the Board (Art. 64) Hungary … … of a certification body pursuant to Article 43.3 (GDPR) …