EDPB Documents (GDPR)

EDPB Opinion on Dutch Authority's IBM Group BCR Draft Decision

The European Data Protection Board (EDPB) has issued an opinion on a draft decision by the Dutch Data Protection Authority concerning the Binding Corporate Rules (BCRs) of the IBM Group. This opinion addresses the international transfer of data and the adequacy of IBM's BCRs.

EDPB Opinion on Dutch Authority's BCD Travel BCR

The European Data Protection Board (EDPB) has issued Opinion 7/2026 regarding a draft decision by the Dutch Supervisory Authority concerning the Binding Corporate Rules (BCRs) of BCD Travel Group. This opinion addresses the international transfer of personal data under GDPR.

EDPB Report on Anonymisation and Pseudonymisation Stakeholder Event

The European Data Protection Board (EDPB) has published a report detailing discussions from a stakeholder event on anonymisation and pseudonymisation techniques. The report summarizes key takeaways and perspectives shared during the event.

EDPB-EDPS Joint Opinion on Cybersecurity Act 2 and NIS 2 Directive Amendments

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have issued a joint opinion on proposed amendments to the Cybersecurity Act 2 and the NIS 2 Directive. This opinion provides recommendations on the legislative proposals concerning cybersecurity certification and network and information security.

EDPB-EDPS Opinion on Biotech Act Privacy Implications

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have issued a joint opinion on the privacy implications of the proposed European Biotech Act. The opinion provides guidance on the GDPR compliance aspects of the proposed legislation.

EDPB Letter to EC on US Entry Privacy Implications

The European Data Protection Board (EDPB) has sent a letter to the European Commission expressing concerns regarding the privacy implications of recent US legislative developments affecting entry conditions for EEA citizens. The letter highlights potential risks to data protection and fundamental rights.

EDPB Opinion on Dutch Authority's Draft Decision for Arcadis Group

The European Data Protection Board (EDPB) has issued an opinion on a draft decision by the Dutch Data Protection Authority concerning Arcadis Group's Binding Corporate Rules (BCRs). This opinion addresses the international transfer of data and the adequacy of the BCRs.

EDPB Opinion on ABN AMRO Binding Corporate Rules

The European Data Protection Board (EDPB) has issued Opinion 06/2026 regarding the Binding Corporate Rules (BCRs) of ABN AMRO. This opinion addresses the draft decision from the Dutch supervisory authority concerning these BCRs.

EDPB Report on Right to Erasure Enforcement

The European Data Protection Board (EDPB) has released a report detailing the outcomes of its Coordinated Enforcement Framework (CEF) action on the right to erasure under GDPR. The report identifies seven recurring challenges faced by controllers in implementing this right and offers recommendations for improvement.

EDPB Reply to Civil Society on EU Spyware Abuse

The European Data Protection Board (EDPB) has issued a reply to a civil society open letter concerning recent spyware abuse cases within the EU. This notice addresses concerns raised by civil society regarding the implications of spyware on data protection and fundamental rights.