Accountability

The principle of accountability under the GDPR requires that controllers are responsible for, and are able to demonstrate compliance with the GDPR. This translates in practice into documenting data protection practices and choices.

Guidance

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Guideline
#Controller/processor #Accountability
Read more about
Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Position Paper on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Other guidance
#Accountability
Read more about
Position Paper on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Policy work

EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR

Legislative opinion
#Controller/processor #Accountability
Read more about
EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR

Compliance instruments

Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)

Opinion of the Board (Art. 64)
#Controller/processor #Accountability #Tools for transfers and derogations
Read more about
Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)