GDPR m.45 Kaynak Fihristi

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Court of Justice of the European Union, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems, ECLI:EU:C:2020:559, 2020-07-16

Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan

European Data Protection Board, Statement 1/2023 on the first review of the functioning of the adequacy decision for Japan

Working document on Adequacy Referential (wp254rev.01)

Article 29 Data Protection Working Party, Working document on Adequacy Referential (wp254rev.01)

Report on the first review of the functioning of the EU–Japan adequacy decision

European Commission, Report on the first review of the functioning of the EU–Japan adequacy decision

Working Document 02/2012 setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (WP195)

Working Document 02/2012 setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (WP195), 2012-01-01

Opinion 5/99 on the level of protection of personal data in Switzerland (WP22)

Opinion 5/99 on the level of protection of personal data in Switzerland (WP22), 1999-01-01

Opinion 6/2003 on the level of protection of personal data in the Isle of Man (WP82)

Opinion 6/2003 on the level of protection of personal data in the Isle of Man (WP82), 2003-01-01

Fourth Annual Report on the situation regarding the protection of individuals with regard to the processing of personal data and privacy in the Community and in Third Countries covering the year 1999 (WP46)

Fourth Annual Report on the situation regarding the protection of individuals with regard to the processing of personal data and privacy in the Community and in Third Countries covering the year 1999 (WP46), 2001-01-01

The Future of Privacy: Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data (WP168)

The Future of Privacy: Joint contribution to the Consultation of the European Commission on the legal framework for the fundamental right to protection of personal data (WP168), 2009-01-01

Third Annual report (WP35)

Third Annual report (WP35), 2000-01-01

Opinion 5/2003 (WP79)

Opinion 5/2003 (WP79), 2003-01-01

Opinion 1/2006 on the application of EU data protection rules to internal whistleblowing schemes in the fields of accounting, internal accounting controls, auditing matters, fight against bribery, banking and financial crime (WP117)

Opinion 1/2006 on the application of EU data protection rules to internal whistleblowing schemes in the fields of accounting, internal accounting controls, auditing matters, fight against bribery, banking and financial crime (WP117), 2006-01-01

Opinion 8/2007 on the level of protection of personal data in Jersey (WP141)

Opinion 8/2007 on the level of protection of personal data in Jersey (WP141), 2007-01-01

Working Document Setting Forth a Co-Operation Procedure for Issuing Common Opinions on “Contractual clauses” Considered as compliant with the EC Model Clauses (WP226)

Working Document Setting Forth a Co-Operation Procedure for Issuing Common Opinions on “Contractual clauses” Considered as compliant with the EC Model Clauses (WP226), 2014-01-01

Opinion 1/2005 on the level of protection ensured in Canada for the transmission of Passenger Name Record and Advance Passenger Information from airlines (WP103)

Opinion 1/2005 on the level of protection ensured in Canada for the transmission of Passenger Name Record and Advance Passenger Information from airlines (WP103), 2005-01-01

Opinion 6/2007 on data protection issues related to the Consumer Protection Cooperation System (CPCS) (WP139)

Opinion 6/2007 on data protection issues related to the Consumer Protection Cooperation System (CPCS) (WP139), 2007-01-01

Opinion 6/2009 on the level of protection of personal data in Israel (WP165)

Opinion 6/2009 on the level of protection of personal data in Israel (WP165), 2009-01-01

Opinion 1/2004 on the level of protection ensured in Australia for the transmission of Passenger Name Record data from airlines (WP85)

Opinion 1/2004 on the level of protection ensured in Australia for the transmission of Passenger Name Record data from airlines (WP85), 2004-01-01

Opinion 9/2007 on the level of protection of personal data in the Faroe Islands (WP142)

Opinion 9/2007 on the level of protection of personal data in the Faroe Islands (WP142), 2007-01-01

Opinion 07/2012 on the level of protection of personal data in the Principality of Monaco (WP198)

Opinion 07/2012 on the level of protection of personal data in the Principality of Monaco (WP198), 2012-01-01

Opinion 4/2002 (WP63)

Opinion 4/2002 (WP63), 2002-01-01

Working document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules - wp155rev05

Opinion 3/2004 on the level of protection ensured in Canada for the transmission of Passenger Name Records and Advanced Passenger Information from airlines (WP88)

Opinion 3/2004 on the level of protection ensured in Canada for the transmission of Passenger Name Records and Advanced Passenger Information from airlines (WP88), 2004-01-01

Opinion 2/2010 on online behavioural advertising (WP171)

Opinion 2/2010 on online behavioural advertising (WP171), 2010-01-01

Opinion 11/2011 on the level of protection of personal data in New Zealand (WP182)

Opinion 11/2011 on the level of protection of personal data in New Zealand (WP182), 2011-01-01

Recommendation 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union (WP43)

Recommendation 2/2001 on certain minimum requirements for collecting personal data on-line in the European Union (WP43), 2001-01-01

Letter of the Chair of the ART 29 WP to OECD

Opinion 04/2016 on European Commission amendments proposals related to the powers of Data Protection Authorities in Standard Contractual Clauses and adequacy decisions - wp241

Article 29 Data Protection Working Party, Opinion 04/2016 on European Commission amendments proposals related to the powers of Data Protection Authorities in Standard Contractual Clauses and adequacy decisions - wp241

Opinion 8/2004 on the information for passengers concerning the transfer of PNR data on flights between the European Union and the United States of America (WP97)

Opinion 8/2004 on the information for passengers concerning the transfer of PNR data on flights between the European Union and the United States of America (WP97), 2004-01-01

Working Document on surveillance of electronic communications for intelligence and national security purposes (WP228)

Working Document on surveillance of electronic communications for intelligence and national security purposes (WP228), 2014-01-01

Opinion 05/2012 on Cloud Computing (WP196)

Opinion 05/2012 on Cloud Computing (WP196), 2012-01-01

Opinion 6/99 concerning the level of personal data protection in Hungary (WP24)

Opinion 6/99 concerning the level of personal data protection in Hungary (WP24), 1999-01-01

Working Document on Binding Corporate Rules for Processors (wp257rev.01)

Article 29 Data Protection Working Party, Working Document on Binding Corporate Rules for Processors (wp257rev.01)

Working document 01/2014 on "Draft ad hoc contractual clauses “EU data processor to non-EU sub-processor" (WP214)

Working document 01/2014 on "Draft ad hoc contractual clauses “EU data processor to non-EU sub-processor" (WP214), 2014-01-01

Opinion 6/2010 on the level of protection of personal data in the Eastern Republic of Uruguay (WP177)

Opinion 6/2010 on the level of protection of personal data in the Eastern Republic of Uruguay (WP177), 2010-01-01

Opinion 7/2009 on the level of protection of personal data in the Principality of Andorra (WP166)

Opinion 7/2009 on the level of protection of personal data in the Principality of Andorra (WP166), 2009-01-01

Explanatory Document on the Processor Binding Corporate Rules (WP204)

Explanatory Document on the Processor Binding Corporate Rules (WP204), 2015-01-01

Working Document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules

Working Document on Frequently Asked Questions (FAQs) related to Binding Corporate Rules, 2008-01-01

Avis n° 231/2022 du 29 septembre 2022

Avis n° 231/2022 du 29 septembre 2022, 2022-01-01

Avis n° 121/2019 du 19 juin 2019

Avis n° 121/2019 du 19 juin 2019, 2019-01-01

Avis n° 18/1998 du 25 mai 1998

Avis n° 18/1998 du 25 mai 1998, 1998-01-01

Avis n° 113/2019 du 5 juin 2019

Avis n° 113/2019 du 5 juin 2019, 2019-01-01

Avis n° 34/1998 du 14 décembre 1998

Avis n° 34/1998 du 14 décembre 1998, 1998-01-01

Avis n° 37/2006 du 27 septembre 2006

Avis n° 37/2006 du 27 septembre 2006, 2006-01-01

Avis n° 248/2021 du 17 décembre 2021

Avis n° 248/2021 du 17 décembre 2021, 2021-01-01

Avis n° 01/2007 du 17 janvier 2007

Avis n° 01/2007 du 17 janvier 2007, 2007-01-01

Modèle de contrat-type de la Commission européenne 2001/497/CE

Modèle de contrat-type de la Commission européenne 2001/497/CE, 2001-01-01

Avis n° 32/1998 du 9 novembre 1998

Avis n° 32/1998 du 9 novembre 1998, 1998-01-01

Avis n° 136/2021 du 24 août 2021

Avis n° 136/2021 du 24 août 2021, 2021-01-01

Modèle de contrat-type de la Commission européenne 2004/915/CE

Modèle de contrat-type de la Commission européenne 2004/915/CE, 2004-01-01

Avis n° 103/2021 du 15 juin 2021

Avis n° 103/2021 du 15 juin 2021, 2021-01-01

Avis n° 29/1998 du 25 septembre 1998

Avis n° 29/1998 du 25 septembre 1998, 1998-01-01

Avis n° 176/2019 du 8 novembre 2019

Avis n° 176/2019 du 8 novembre 2019, 2019-01-01

Avis n° 21/2005 du 30 novembre 2005

Avis n° 21/2005 du 30 novembre 2005, 2005-01-01

Anwendungshinweise zu den Anforderungen an Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken

Anwendungshinweise zu den Anforderungen an Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken, 2025-09-01

Empfehlungen für Informationspflichten bei Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken (Anlage zu Orientierungshilfe zu Anwendungshinweisen)

Empfehlungen für Informationspflichten bei Datenübermittlungen an Drittländer im Rahmen der wissenschaftlichen Forschung zu medizinischen Zwecken (Anlage zu Orientierungshilfe zu Anwendungshinweisen), 2025-09-01

Videokonferenzsysteme

Orientierungshilfe der Aufsichtsbehörden für Anbieter:innen von digitalen Diensten (OH Digitale Dienste)

Orientierungshilfe der Aufsichtsbehörden für Anbieter:innen von digitalen Diensten (OH Digitale Dienste), 2024-11-01

Tredjelandsoverførsler, artikel 37 i retshåndhævelsesdirektivet (Vejledning 01/2023)

Tredjelandsoverførsler, tilstrækkeligt databeskyttelsesniveau (wp254)

CASE OF L.B. v. HUNGARY

CASE OF L.B. v HUNGARY [GC] ECtHR App No 36345/16 (9 March 2023), 2023-03-09

Opinion 07/2021 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of Kumon Group

Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group

Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data

European Data Protection Board, Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data

Opinion 25/2020 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of Tetra Pak

Opinion 5/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Arcadis Group

Opinion 5/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework

Opinion 18/2023 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of the Collibra Group

Opinion 9/2024 on the draft decision of the Romanian Supervisory Authority regarding the Processor Binding Corporate Rules of the Genpact Group

Opinion 24/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Nestlé Group

Opinion 11/2026 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of the Kuwait Petroleum Group

Opinion 10/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Worldline Group

Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code

Opinion 20/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Processor Binding Corporate Rules of the Northern Trust Group

Information note on data transfers under the GDPR to the United Kingdom after the transition period

Opinion 06/2022 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of Groupon International Limited

Opinion 9/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Jacobs Douwe Egberts Group

Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679

Opinion 32/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Ramboll Group

Opinion 06/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABN AMRO Bank Group

Opinion 13/2024 on the draft decision of the Supervisory Authority of Liechtenstein regarding the Controller Binding Corporate Rules of the Ivoclar Vivadent Group

Opinion 14/2024 on the draft decision of the Estonian Supervisory Authority regarding the Processor Binding Corporate Rules of the Mercans Group

EDPB Annual Report 2021

Opinion 32/2020 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of Equinix

Opinion 22/2021 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the CGI Group

Opinion 23/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for customer data of the UPS Group

EDPB Work Programme 2024-2025

Opinion 20/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Comcast Corporation Group

EDPB Letter to the European Commission on its review of its eleven adequacy decisions adopted under Directive 95/46/EC

Opinion 26/2023 on the draft decision of the Romanian Supervisory Authority regarding the Processor Binding Corporate Rules of the OSF Global Services Group

Opinion 27/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Tessi Group

Opinion 23/2022 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Samres Group

Opinion 17/2022 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the ANTOLIN Group

Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group

Opinion 30/2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group

Opinion 17/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the FCC Group

Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom

Opinion 7/2023 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of Autodesk Group

Opinion 16/2023 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Informatica Group

Opinion 04/2021 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of BDO

Opinion 18/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Rubrik Group

Opinion 34/2023 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Processor Binding Corporate Rules of the Cerner Group

Opinion 25/2024 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Processor Binding Corporate Rules of the Infosys Group

Opinion 21/2021 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the CGI Group

Opinion 19/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group

Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group

Opinion 28/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Oregon Tool, Inc (formerly “Blount”)

Opinion 28/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by Brazil

Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group

Opinion 29/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Sodexo Group

Opinion 08/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Bioclinica Group

Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group

Opinion 22/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group

Opinion 19/2022 on the draft decision of the Baden- Württemberg (Germany) Supervisory Authority regarding the Controller Binding Corporate Rules of the Mercedes- Benz Group

Opinion 16/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the AVATURE Group

Information note on data transfers under the GDPR to the United Kingdom after the transition period - update 13/01/2021

Opinion 33/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Carrier

EDPB Annual Report 2022

Opinion 4/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ABB Group

Opinion 9/2023 on the draft decision of the Italian Supervisory Authority regarding the Controller Binding Corporate Rules of Vertiv

Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

European Data Protection Board, Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Opinion 35/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Carlsberg Group

Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR

Opinion 19/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the American Express Global Business Travel Group

Opinion 18/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Shopify Group

Opinion 2/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the AkzoNobel Group

Opinion 20/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Fluor Group

Guidelines 01/2023 on Article 37 Law Enforcement Directive

Opinion 04/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Norican Group

Opinion 2/2025 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of the Alfa Laval Group

Opinion 30/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Sodexo Group

Opinion 8/2023 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of Autodesk Group

Opinion 10/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SLB Group

Opinion 6/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Royal Greenland Group

Opinion 36/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Booking.com Group

Contribution of the EDPB to the evaluation of the GDPR under Article 97

Statement on the end of the Brexit transition period

Opinion 25/2023 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the SHV Holding N.V. Group

Opinion 02/2022 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the WEBHELP Group

Opinion 28/2020 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of Iberdrola Group

Opinion 05/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the MAPFRE Group

Opinion 09/2022 on the draft decision of the Danish Supervisory Authority regarding the Processor Binding Corporate Rules of Bioclinica Group

Opinion 31/2021 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the COLT Group

Opinion 20/2022 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Ellucian Group

EDPB Letter to the European Commission regarding INGO registration requirements

Opinion 3/2024 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Accenture Group

Opinion 3/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the FrieslandCampina Group

Opinion 30/2021 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the COLT Group

Opinion 12/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the ASML Group

Opinion 14/2023 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Vestas Wind Systems Group

Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group

Opinion 11/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Signify Group

Opinion 17/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group

Opinion 1/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Heineken Group

Opinion 24/2022 on the draft decision of the Swedish Supervisory Authority regarding the Processor Binding Corporate Rules of the Samres Group

Coordinated Enforcement Action, use of cloud-based services by the public sector

Opinion 30/2022 on the draft decision of the Slovak Supervisory Authority regarding the Controller Binding Corporate Rules of Piano Group

Statement 02/2022 on personal data transfers to the Russian Federation

Statement 02/2022 on personal data transfers to the Russian Federation

Opinion 21/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group

Opinion 03/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of BDO

Opinion 07/2022 on the draft decision of the Hungarian Supervisory Authority regarding the Controller Binding Corporate Rules of MOL Group

Opinion 27/2022 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of LEYTON Group

Opinion 01/2021 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Saxo Bank Group

EDPB Annual Report 2023

Opinion 21/2022 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Ellucian Group

Opinion 27/2020 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of Coloplast Group

Guidelines 07/2022 on certification as a tool for transfers

European Data Protection Board, Guidelines 07/2022 on certification as a tool for transfers

Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group

Information note on data transfers under the GDPR in the event of a no-deal Brexit

Opinion 8/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Statkraft Group

Opinion 27/2021 on the draft decision of the Supervisory Authority of North Rhine-Westphalia (Germany) regarding the Processor Binding Corporate Rules of the Internet Initiative Japan Group

Opinion 29/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the DSV Group

Opinion 01/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Coface Group

Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group

Opinion 28/2018 regarding the European Commission Draft Implementing Decision on the adequate protection of personal data in Japan

Opinion 32/2023 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Thalès Group

Opinion 13/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Aramex Group

Opinion 24/2020 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of Jotun

EDPB Response to MEP Moritz Körner regarding the relevance of encryption bans in third countries

Opinion 29/2020 on the draft decision of the Lower Saxony Supervisory Authority regarding the Controller Binding Corporate Rules of Novelis Group

Opinion 29/2021 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of Oregon Tool, Inc (Formerly “Blount”)

Opinion 03/2022 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the WEBHELP Group

Opinion 10/2023 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the PROSEGUR Group

Opinion 23/2024 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Aptiv Group

Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR)

Opinion 02/2021 on the draft decision of the Swedish Supervisory Authority regarding the Controller Binding Corporate Rules of Elanders Group

Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures

Opinion 26/2022 on the draft decision of the Data Protection Authority of Bavaria for the Private Sector regarding the Controller Binding Corporate Rules of the Munich Re Reinsurance Group

Opinion 31/2022 on the draft decision of the Slovak Supervisory Authority regarding the Processor Binding Corporate Rules of Piano Group

Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group

Opinion 18/2022 on the draft decision of the Baden- Württemberg (Germany) Supervisory Authority regarding the Controller Binding Corporate Rules of the Daimler Truck Group

Opinion 7/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the BCD Travel Group

Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group

Opinion 21/2023 on the draft decision of the Belgian Supervisory Authority regarding the Processor Binding Corporate Rules of the UPS Group

Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group

EDPB Response to Miguel de Serpa Soares' letter regarding Guidelines 2/2020

Information Note on the Data Privacy Framework redress mechanism for national security purposes

Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)

Opinion 22/2022 on the draft decision of the Liechtenstein Supervisory Authority regarding the Controller Binding Corporate Rules of Hilti Group

Opinion 08/2021 on the draft decision of the Baden- Wurttemberg Supervisory Authority regarding the Processor Binding Corporate Rules of Luxoft Group

Opinion 9/2025 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Worldline Group

EDPB Annual Report 2020

Opinion 15/2024 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of the AVATURE Group

Opinion 01/2024 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Booking.com Group

Opinion 10/2022 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Controller Binding Corporate Rules of Fresenius Group

Opinion 12/2026 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the Santander Group

EDPB Report on the first review of the European Commission Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework

Opinion 14/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the United Kingdom

Opinion 06/2021 on the draft decision of the Spanish Supervisory Authority regarding the Processor Binding Corporate Rules of Kumon Group

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea

Opinion 26/2021 on the draft decision of the Supervisory Authority of North Rhine-Westphalia (Germany) regarding the Controller Binding Corporate Rules of the Internet Initiative Japan Group

Opinion 09/2021 on the draft decision of the Baden- Wurttemberg Supervisory Authority regarding the Controller Binding Corporate Rules of Luxoft Group

Opinion 14/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Wilh. Wilhelmsen Group

Opinion 17/2023 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Informatica Group

Opinion 19/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Rubrik Group

Opinion 21/2024 on the draft decision of the French Supervisory Authority regarding the Processor Binding Corporate Rules of the Talan Group

Opinion 33/2023 on the draft decision of the Hesse Supervisory Authority (Germany) regarding the Controller Binding Corporate Rules of the Cerner Group

Opinion 20/2024 on the draft decision of the North Rhine-Westphalian Supervisory Authority regarding the Controller Binding Corporate Rules of the Viega Group

Statement on the Court of Justice of the European Union Judgment in Case C-311/18 - Data Protection Commissioner v Facebook Ireland and Maximillian Schrems

Opinion 8/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the IBM Group

Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group

Study on the enforcement of GDPR obligations against entities established outside the EEA but falling under Article 3(2) GDPR

Internal EDPB Document 02/2021 on SAs duties in relation to alleged GDPR infringements

Opinion 05/2022 on the draft decision of the Danish Supervisory Authority regarding the Controller Binding Corporate Rules of the Lundbeck Group

Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation

Information note on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023

Opinion 34/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Otis

EDPB Work Programme 2026-2027

Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group

Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group

Opinion 28/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Servier Group

Opinion 31/2023 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Thalès Group

EDPBI:FR:OSS:D:2022:344 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:344 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-03-02

EDPBI:NL:OSS:D:2025:3385 — NL SA final decision (Article 45 (Transfers on the basis of an adequacy decision), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:NL:OSS:D:2025:3385 — NL SA final decision (Article 45 (Transfers on the basis of an adequacy decision), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2025-03-25

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards)), 2022-04-22

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers))

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers)), 2023-07-26

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-02-02

EDPBI:FR:OSS:D:2022:345 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:345 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-03-02

EDPBI:FR:OSS:D:2022:330 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:FR:OSS:D:2022:330 — FR SA final decision (Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2022-02-03

Parliament v Council (Transport) [2006] EUECJ C-317/04

Case C-317/04 Parliament v Council (Transport), 2006-05-30

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Case C-311/18 Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems EU:C:2019:1145, Opinion of AG Saugmandsgaard Øe

Philippe Latombe , residing in Nantes (France) v European Commission

Case T-553/23 Philippe Latombe , residing in Nantes (France) v European Commission EU:T:2025:831

Opinion pursuant to Article 218(11) TFEU

Case C-1/15 Opinion pursuant to Article 218(11) TFEU EU:C:2016:656, Opinion of AG Mengozzi

Transfer of Passenger Name Record data from the European Union to Canada (Opinions of the Court) [2017] EUECJ Avis-1/15_OC

Transfer of Passenger Name Record data from the European Union to Canada (Opinions of the Court) EU:C:2017:592, 2017-07-26

European Parliament v Council of the European Union and Commission of the European Communities

European Parliament v Council of the European Union and Commission of the European Communities EU:C:2006:346

Schrems v Data Protection Commissioner (Opinion) [2015] EUECJ C-362/14_0

Case C-362/14 Schrems v Data Protection Commissioner, 2015-09-23

ECLI:EU:C:2005:710

Case C-317/04 EU:C:2005:710, Opinion of AG Léger

WM and Sovim SA v Luxembourg Business Registers

WM and Sovim SA v Luxembourg Business Registers EU:C:2022:912

Ireland v Parliament & Council (Approximation of laws) [2008] EUECJ C-301/06_O

Case C-301/06 Ireland v Parliament & Council (Approximation of laws), 2008-10-14

Masdi (Protection of personal data - Regulation (EU) 2016/679 - Processing of data for the issuance of a COVID-19 certificate - Opinion) [2024] EUECJ C-169/23_O

Case C-169/23 Masdi (Protection of personal data - Regulation (EU) 2016/679 - Processing of data for the issuance of a COVID-19 certificate) EU:C:2024:474, Opinion of AG Medina

Lindqvist (Approximation of laws) [2003] EUECJ C-101/01

Case C-101/01 Lindqvist (Approximation of laws), 2003-11-06

ECLI:EU:C:2022:43

Case C-37/20 ECLI:EU:C:2022:43 EU:C:2022:43, Opinion of AG Pitruzzella, 2022-01-20

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd EU:C:2015:650

Bindl v Commission (Processing of personal data - Protection of natural persons with regard to the processing of personal data by the Union institutions - Concept of 'transfer of personal data to a third country' - Judgment) [2025] EUECJ T-354/22

Case T-354/22 Bindl v Commission (Processing of personal data - Protection of natural persons with regard to the processing of personal data by the Union institutions - Concept of 'transfer of personal data to a third country') EU:T:2025:4

Parliament v Council (Transport) [2006] EUECJ C-318/04

Case C-318/04 Parliament v Council (Transport), 2006-05-30

Criminal proceedings against Bodil Lindqvist

Criminal proceedings against Bodil Lindqvist EU:C:2003:596

Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes - Judgment) [2020] EUECJ C-311/18

Case C-311/18 Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes), 2020-07-16

Parliament v Council (Transport : OPINION) [2005] EUECJ C-317/04_O

Case C-317/04 Parliament v Council (Transport :), 2005-11-22

Maximillian Schrems v Data Protection Commissioner

Case C-362/14 Maximillian Schrems v Data Protection Commissioner EU:C:2015:627, Opinion of AG Bot

COM(2026) 502 - Proposal Regulation Cloud and AI Development Act (CADA)

COM(2026) 502 - Proposal Regulation Cloud and AI Development Act (CADA), 2026-06-03

EDPS decision on the investigation into the European Commission's use of Microsoft 365

EDPS decision on the investigation into the European Commission's use of Microsoft 365, 2024-03-08

Commission Implementing Decision (EU) 2026/179 of 26 January 2026 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data by Brazil (notified under document C(2026) 373) (Text with EEA relevance)

Commission Decision of 28 April 2004 on the adequate protection of personal data in the Isle of Man (notified under document number C(2004) 1556) (Text with EEA relevance) (2004/411/EC)

Commission Implementing Decision (EU) 2016/2295 of 16 December 2016 amending Decisions 2000/518/EC, 2002/2/EC, 2003/490/EC, 2003/821/EC, 2004/411/EC, 2008/393/EC, 2010/146/EU, 2010/625/EU, 2011/61/EU and Implementing Decisions 2012/484/EU, 2013/65/EU on the adequate protection of personal data by certain countries, pursuant to Article 25(6) of Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2016) 8353) (Text with EEA relevance)

Decision 87/2010

Regulation (EU) 2019/1896 of the European Parliament and of the Council of 13 November 2019 on the European Border and Coast Guard and repealing Regulations (EU) No 1052/2013 and (EU) 2016/1624

Commission Implementing Decision (EU) 2019/419 of 23 January 2019 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by Japan under the Act on the Protection of Personal Information (notified under document C(2019) 304) (Text with EEA relevance)

Regulation (EC) No 767/2008 of the European Parliament and of the Council of 9 July 2008 concerning the Visa Information System (VIS) and the exchange of data between Member States on short-stay visas (VIS Regulation)

Regulation (EU) 2021/1134 of the European Parliament and of the Council of 7 July 2021 amending Regulations (EC) No 767/2008, (EC) No 810/2009, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2019/817 and (EU) 2019/1896 of the European Parliament and of the Council and repealing Council Decisions 2004/512/EC and 2008/633/JHA, for the purpose of reforming the Visa Information System

Commission Implementing Decision (EU) 2016/2297 of 16 December 2016 amending Decisions 2001/497/EC and 2010/87/EU on standard contractual clauses for the transfer of personal data to third countries and to processors established in such countries, under Directive 95/46/EC of the European Parliament and of the Council (notified under document C(2016) 8471) (Text with EEA relevance)

2000/519/EC: Commission Decision of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided in Hungary (notified under document number C(2000) 2305) (Text with EEA relevance.)

Regulation (EU) No 1024/2012 of the European Parliament and of the Council of 25 October 2012 on administrative cooperation through the Internal Market Information System and repealing Commission Decision 2008/49/EC ( the IMI Regulation ) (Text with EEA relevance)

Regulation (EU) No 1024/2012 of the European Parliament and of the Council of 25 October 2012 on administrative cooperation through the Internal Market Information System and repealing Commission Decision 2008/49/EC (the IMI Regulation) (Text with EEA relevance)

2000/520/EC: Commission Decision of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the US Department of Commerce (notified under document number C(2000) 2441) (Text with EEA relevance.)

Regulation (EU) 2019/1240 of the European Parliament and of the Council of 20 June 2019 on the creation of a European network of immigration liaison officers (recast)

Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES) to register entry and exit data and refusal of entry data of third-country nationals crossing the external borders of the Member States and determining the conditions for access to the EES for law enforcement purposes, and amending the Convention implementing the Schengen Agreement and Regulations (EC) No 767/2008 and (EU) No 1077/2011

Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework (notified under document C(2023)4745) (Text with EEA relevance)

Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance)

Commission Decision of 31 January 2011 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the State of Israel with regard to automated processing of personal data (notified under document C(2011) 332) (Text with EEA relevance) (2011/61/EU)

Regulation (EU) 2015/847 of the European Parliament and of the Council of 20 May 2015 on information accompanying transfers of funds and repealing Regulation (EC) No 1781/2006 (Text with EEA relevance)

2002/2/EC: Commission Decision of 20 December 2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act (notified under document number C(2001) 4539)

Decision 535/2004

Commission Implementing Regulation (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021)4800) (Text with EEA relevance)

Commission Decision of 8 May 2008 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Jersey (notified under document number C(2008) 1746) (Text with EEA relevance) (2008/393/EC)

Commission Implementing Decision of 19 December 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by New Zealand (notified under document C(2012) 9557) (Text with EEA relevance) (2013/65/EU)

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)

Commission Implementing Decision (EU) 2025/1226 of 24 June 2025 amending Implementing Decision (EU) 2021/1772 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2025) 3928) (Text with EEA relevance)

Decision 2021/914

Decision 496/2004

Commission Decision of 19 October 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Andorra (notified under document C(2010) 7084) (Text with EEA relevance) (2010/625/EU)

Regulation (EU) 2025/327 of the European Parliament and of the Council of 11 February 2025 on the European Health Data Space and amending Directive 2011/24/EU and Regulation (EU) 2024/2847 (Text with EEA relevance)

Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, and on the free movement of such data, and repealing Council Framework Decision 2008/977/JHA

Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176) (Text with EEA relevance)

Commission Implementing Decision (EU) 2022/254 of 17 December 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the Republic of Korea under the Personal Information Protection Act (notified under document C(2021) 9316) (Text with EEA relevance)

Regulation (EU) 2024/3110 of the European Parliament and of the Council of 27 November 2024 laying down harmonised rules for the marketing of construction products and repealing Regulation (EU) No 305/2011 (Text with EEA relevance)

Decision 253/2006

Commission Implementing Decision (EU) 2025/2574 of 19 December 2025 amending Commission Implementing Decision (EU) 2021/1772 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2025) 8771) (Text with EEA relevance)

Commission Implementing Decision of 21 August 2012 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data by the Eastern Republic of Uruguay with regard to automated processing of personal data (notified under document C(2012) 5704) (Text with EEA relevance) (2012/484/EU)

Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226

Decision 230/2006

2001/497/EC: Commission Decision of 15 June 2001 on standard contractual clauses for the transfer of personal data to third countries, under Directive 95/46/EC (Text with EEA relevance) (notified under document number C(2001) 1539)

Commission Implementing Decision (EU) 2025/2571 of 19 December 2025 amending Commission Implementing Decision (EU) 2021/1773 pursuant to Directive (EU) 2016/680 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2025) 8782) (Text with EEA relevance)

Commission Decision of 5 March 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection provided by the Faeroese Act on processing of personal data (notified under document C(2010) 1130) (Text with EEA relevance) (2010/146/EU)

Regulation (EU) 2018/1860 of the European Parliament and of the Council of 28 November 2018 on the use of the Schengen Information System for the return of illegally staying third-country nationals

Commission Staff Working Document

IMMC.COM%282026%29384%20final.ENG.xhtml.1_EN_ACT_part1_v3.docx

52012SC0072

24e rapport d'activité 2003

24e rapport d'activité 2003, 2023-11-01

21e rapport d’activité 2000

21e rapport d’activité 2000, 2023-11-01

22e rapport d’activité 2001

22e rapport d’activité 2001, 2023-11-01

23e rapport d’activité 2002

23e rapport d’activité 2002, 2023-11-01

Délibération 2021-082 du 15 juillet 2021

Délibération 2021-082 du 15 juillet 2021, 2021-07-15

Loi n° 78-17 du 6 janvier 1978 — Article 43 quinquies

Loi n° 78-17 du 6 janvier 1978 — Article 43 quinquies, 2018-06-22

Conseil d'État, Juge des référés, 19/06/2020, 440916, Inédit au recueil Lebon

Conseil d'État, Juge des référés, 19/06/2020, 440916, Inédit au recueil Lebon, 2020-06-19

Délibération 2012-415 du 29 novembre 2012

Délibération 2012-415 du 29 novembre 2012, 2012-11-29

Conseil d'État, Assemblée, 19/07/2019, 424216, Publié au recueil Lebon

Conseil d'État, Assemblée, 19/07/2019, 424216, Publié au recueil Lebon, 2019-07-19

Loi n° 78-17 du 6 janvier 1978 — Article 39

Loi n° 78-17 du 6 janvier 1978 — Article 39, 2019-06-01

Conseil d'État, Juge des référés, 22/03/2024, 492369, Inédit au recueil Lebon

Conseil d'État, Juge des référés, 22/03/2024, 492369, Inédit au recueil Lebon, 2024-03-22

Délibération 2021-048 du 15 avril 2021

Délibération 2021-048 du 15 avril 2021, 2021-04-15

Code de procédure pénale — Article R2-15-2

Code de procédure pénale — Article R2-15-2, 2021-09-16

CNPD (Portugal) - Deliberação 2021/622

CNPD (Portugal) - Deliberação 2021/622, 2021-05-11

BVwG - W245 2252208-1/36E and W245 2252221-1/30E

BVwG - W245 2252208-1/36E and W245 2252221-1/30E, 2023-05-12

LG Bonn - 13 O 156/24

LG Bonn - 13 O 156/24, 2025-06-03

AP (The Netherlands) - 2025-005323

AP (The Netherlands) - 2025-005323, 2026-04-01

Cass.Civ. - 12967/2024

Cass.Civ. - 12967/2024, 2024-02-01

TA Luxembourg - N° 46416

TA Luxembourg - N° 46416, 2021-09-24

BVwG - W171 2302513-1

BVwG - W171 2302513-1, 2026-05-18

AEPD (Spain) - PS/00059/2020

APD/GBA (Belgium) - 131/2024

APD/GBA (Belgium) - 131/2024, 2024-10-11

Datatilsynet (Norway) - 20/03771-17

Datatilsynet (Norway) - 20/03771-17, 2023-07-26

CNPD (Portugal) - Deliberação 2019/494

CNPD (Portugal) - Deliberação 2019/494, 2019-09-03

DSB (Austria) - 2022-0.296.352

DSB (Austria) - 2022-0.296.352, 2022-05-16

HmbBfDI (Hamburg) - Ende des ZOOM-Verfahrens

VwGH - 2021/04/0030-4

VwGH - 2021/04/0030-4, 2024-03-06

HDPA (Greece) - 20/2020

HDPA (Greece) - 20/2020, 2020-03-03

OLG Köln - 6 U 58/23

OLG Köln - 6 U 58/23, 2023-11-03

APD/GBA (Belgium) - 21/2022

High Court - TikTok Technology Limited v Data Protection Commission (2026) IEHC 347

High Court - TikTok Technology Limited v Data Protection Commission (2026) IEHC 347, 2026-06-03

DPC (Ireland) - TikTok

DPC (Ireland) - TikTok, 2025-05-02

BVwG - W137 2255764-1

BVwG - W137 2255764-1, 2023-06-30

Datatilsynet (Denmark) - 2025-431-0053

Datatilsynet (Denmark) - 2025-431-0053, 2026-01-29

NAIH (Hungary) - NAIH-10362-1/2025

AEPD (Spain) - PS/00267/2020

CE - 450163

CE - 450163, 2021-03-12

High Court - 2023 640 JR

High Court - 2023 640 JR, 2024-03-22

CE - 466115

CE - 466115, 2024-01-30

LG Rostock - 3 O 762/19

LG Rostock - 3 O 762/19, 2020-09-15

OLG Wien - 11 R 75/25t

CNIL (France) - Google Analytics (no case number)

CNIL (France) - Google Analytics (no case number), 2022-02-10

APD/GBA (Belgium) - 79/2025

APD/GBA (Belgium) - 79/2025, 2025-04-24

CE - N° 444937

CE - N° 444937, 2020-10-13

CTPDA (Spain) - RPS-2025/082

CTPDA (Spain) - RPS-2025/082, 2025-12-02

AEPD (Spain) - EXP202203580

AEPD (Spain) - EXP202203580, 2024-10-03

DSB (Austria) - D130.1013 2024-0.743.431

DSB (Austria) - D130.1013 2024-0.743.431, 2024-12-17

AP (The Netherlands) - Uber

AP (The Netherlands) - Uber, 2024-07-22

DPC (Ireland) - IN-20-8-1

DPC (Ireland) - IN-20-8-1, 2023-05-12

Cour Administrative - 49701C

Cour Administrative - 49701C, 2024-12-12

LG Traunstein - 9 O 173/24

LG Traunstein - 9 O 173/24, 2024-07-08

LG Köln - 33 O 376/22

LG Köln - 33 O 376/22, 2023-03-23

Council of State - 251.378

Council of State - 251.378, 2021-08-19

APD/GBA (Belgium) - 149/2022

APD/GBA (Belgium) - 149/2022, 2022-10-18

NAIH (Hungary) - NAIH-3561-4/2022

Datatilsynet (Denmark) - 2021-7329-0052

Datatilsynet (Denmark) - 2021-7329-0052, 2023-04-20