EDPB (ex Art. 29 WP)

EDPB Documents

Guidelines 2/2018 – on derogations of Article 49 under Regulation 2016/679

Guidelines 1/2018 – on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation 2016/679

 

Art. 29 WP GDPR Guidelines endorsed by the European Data Protection Board:

Endorsment of GDPR WP 29 guidelines

WP – 265 – Recommendation on the Standard Application form for Approval of Processor Binding Corporate Rules for the Transfer of Personal Data,

WP 264 – Recommendation on the Standard Application for Approval of Controller Binding Corporate Rules for the Transfer of Personal Data.

WP 263 rev. 01 – Working Document Setting Forth a Co-Operation Procedure for the approval of “Binding Corporate Rules” for controllers and processors under the GDPR.

WP 260 rev. 01 – Guidelines on transparency under Regulation 2016/679.

WP 259 rev. 01 – Guidelines on consent under Regulation 2016/679.

WP 257 rev. 01 – Working Document setting up a table with the elements and principles to be found in Processor Binding Corporate Rules.

WP 256 rev. 01 – Working Document setting up a table with the elements and principles to be found in Binding Corporate Rules.

WP 254 rev. 01 – Adequacy Referential.

WP 253 – Guidelines on the application and setting of administrative fines for the purposes of the Regulation 2016/679.

WP 251 rev. 01 – Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679.

WP 250 rev. 01 – Guidelines on Personal data breach notification under Regulation 2016/679.

WP248 rev. 01 – Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679.

WP 244 rev. 01 – Guidelines for identifying a controller or processor’s lead supervisory authority.

WP243 rev.01 – Guidelines on Data Protection Officers (‘DPO’)

WP 242 rev. 01 – Guidelines on the right to data portability under Regulation 2016/679.

Position Paper on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

WP260 – Guidelines on transparency under Regulation 2016/679

WP259 – Guidelines on Consent under Regulation 2016/679

WP258 – Opinion on some key issues of the Law Enforcement Directive (EU 2016/680

WP257 – Working Document setting up a table with the elements and principles to be found in Processor Binding Corporate Rules

WP256 – Working Document setting up a table with the elements and principles to be found in Binding Corporate Rules

WP255 – EU-U.S. Privacy Shield. First annual Joint Review

WP254 – Adequacy Referential (updated)

WP253 – Guidelines on the application and setting of administrative fines for the purposes of the Regulation 2016/679

WP252 – Opinion 03/2017 on Processing personal data in the contex

WP251 – Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

WP250 – Guidelines on Personal Data Breach Notification under Regulation 2016/279

WP249 – Opinion 2/2017 on data processing at work

WP248, rev.01 – Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679

WP248 – Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679.pdf

WP248 – ITALIANO Linee-guida concernenti la valutazione di impatto sulla protezione dei dati nonché i criteri per stabilire se un trattamento “possa presentare un rischio elevato” ai sensi del regolamento 201//679

WP247 – Opinion 01/2017 on the Proposed Regulation for the ePrivacy Regulation (2002/58/EC)

WP246 – EU-US privacy shield F.A.Q. for European Individuals

WP245 – EU-US privacy shield F.A.Q. for European businesses

WP244, rev. 01 – Guidelines for identifying a controller or processor’s lead supervisory authority

WP244, annex II – Guidelines for identifying a controller or processor’s lead supervisory authority

WP244 – Guidelines for identifying a controller or processor’s lead supervisory authority

WP243, rev. 01 – Guidelines on Data Protection Officers (‘DPOs’)

WP243, annex – F.A.Q.

WP243 – ITALIANO Linee guida sui responsabili della protezione dei dati (RPD)

WP242, annex – F.A.Q.

WP242, allegato – ITALIANO F.A.Q.

WP242 – Guidelines on the right to data portability

WP241 – Opinion 04/2016 on European Commission amendments proposals related to the powers of Data Protection Authorities in Standard Contractual Clauses and adequacy decisions

WP241, rev.01 – Guidelines on the right to data portability

WP240 – Opinion 03/2016 on the evaluation and review of the ePrivacy Directive (2002/58/EC)

WP239 – Opinion 02/2016 on the publication of Personal Data for Transparency purposes in the Public Sector

WP238 – Opinion 01/2016 on the EU – U.S. Privacy Shield draft adequacy decision

WP237 – Working Document 01/2016 on the justification of interferences with the fundamental rights to privacy and data protection through surveillance measures when transferring personal data (European Essential Guarantees)

WP-236 – Statement on the 2016 action plan for the implementation of the General Data Protection Regulation (GDPR)

WP-235 – Work programme 2016 – 2018

WP234 – Guidelines for Member States on the criteria to ensure compliance with data protection requirements in the context of the automatic exchange of personal data for tax purposes

WP233 – Opinion 03/2015 on the draft directive on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and the free movement of such data

WP232 – Opinion 02/2015 on C-SIG Code of Conduct on Cloud Computing

WP231 – Opinion 01/2015 on Privacy and Data Protection Issues relating to the Utilisation of Drones

WP230 – Statement of the WP29 on automatic inter-state exchanges of personal data for tax purposes

WP229 – Cookie sweep combined analysis – REPORT

WP204 – Explanatory Document on the Processor Binding Corporate Rules

WP179 update – Update of Opinion 8/2010 on applicable law in light of the CJEU judgement in Google Spain