Legal basis
Before processing individuals’ data, organisations must identify a legal basis under the GDPR. The GDPR lists six legal bases that may be relied on depending on the context in which this processing takes place: consent, performance of a contract, legal obligation, vital interests of an individual, public interest and legitimate interest.
The GDPR also establishes additional conditions for the processing of special categories of data: the processing of these types of data, due to their sensitivity, is generally prohibited except in specific cases.
Guidance
Guidelines 02/2021 on virtual voice assistants
Guideline
#Basic principles
#Legal basis
#Technology
#Privacy by design and by default
Read more about
Guidelines 02/2021 on virtual voice assistants
Guidelines 8/2020 on the targeting of social media users
Guideline
#Basic principles
#Legal basis
#Technology
#Automated decision making, profiling and Online tracking
#Online platforms
Read more about
Guidelines 8/2020 on the targeting of social media users
Enforcement
Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)
EDPB Binding Decisions
#Legal basis
#GDPR enforcement
#Fines
#Cooperation between authorities
Read more about
Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)
Binding Decision 5/2022 on the dispute submitted by the Irish SA regarding WhatsApp Ireland Limited (Art. 65 GDPR)
EDPB Binding Decisions
#Basic principles
#Legal basis
#GDPR enforcement
#Fines
#Cooperation between authorities
Read more about
Binding Decision 5/2022 on the dispute submitted by the Irish SA regarding WhatsApp Ireland Limited (Art. 65 GDPR)
Policy work
EDPB-EDPS Joint Opinion 3/2026 on the Proposal for a European Biotech Act
Legislative opinion
#Cross-regulatory interplay
#Artificial intelligence
#Health and research
#Legal basis
#Controller/processor
Read more about
EDPB-EDPS Joint Opinion 3/2026 on the Proposal for a European Biotech Act
EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)
Legislative opinion
#Artificial intelligence
#Automated decision making, profiling and Online tracking
#Controller/processor
#Cross-regulatory interplay
#Legal basis
Read more about
EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)
Enforcement support
Study on the secondary use of personal data in the context of scientific research
Legal study by external suppliers
#Legal basis
#Health and research
Read more about
Study on the secondary use of personal data in the context of scientific research
Compliance instruments
Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models
Opinion of the Board (Art. 64)
#Legal basis
#Artificial intelligence
#Anonymisation/pseudonymisation
Read more about
Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models
Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms
Opinion of the Board (Art. 64)
#Legal basis
#Online platforms
Read more about
Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms