Technology

Cutting-edge technologies like AI, facial recognition, connected vehicles and the Internet of Things (IoT) largely rely on personal data. While these technologies bring numerous benefits, they also come with new risks and challenges to personal data protection and security.
The EDPB provides guidance on how to ensure data protection when developing and using these new technologies, and how EU data protection laws interact with other relevant legislations such as the AI Act.

Guidance

Statement 1/2025 on Age Assurance

Statement
#Children #Technology
Read more about
Statement 1/2025 on Age Assurance

Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive

Guideline
#Technology #Cross-regulatory interplay
Read more about
Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive

Policy work

EDPB Annual Report 2025

Reports, statements, and letters
#Anonymisation/pseudonymisation #GDPR enforcement #Cooperation between authorities #Cross-regulatory cooperation #International cooperation #Artificial intelligence #Technology
Read more about
EDPB Annual Report 2025

Statement 2/2024 on the financial data access and payments package

Reports, statements, and letters
#Technology #Financial matters
Read more about
Statement 2/2024 on the financial data access and payments package

Enforcement support

The Digital Euro and its token-based offline modality

Support Pool of Experts
#Financial matters #Technology
Read more about
The Digital Euro and its token-based offline modality

EDPB website auditing tool

Support Pool of Experts
#GDPR enforcement #Cooperation between authorities #Technology
Read more about
EDPB website auditing tool

Compliance instruments

Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR)

Opinion of the Board (Art. 64)
#Technology #Privacy by design and by default #Cybersecurity
Read more about
Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR)

Internal procedure

Mandate on geolocation and other tracing tools in the context of the COVID-19 outbreak

Internal procedural guidance
#Technology #Automated decision making, profiling and Online tracking #Health and research
Read more about
Mandate on geolocation and other tracing tools in the context of the COVID-19 outbreak