Decision in the matter of WhatsApp Ireland Limited made pursuant to Section 111 of the Data Protection Act 2018

View all Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

20 August 2021

Ireland

Decision Type

Decision of the Data Protection Commission made pursuant to Section 111 of the Data Protection Act, 2018 and Articles 60 and 65 of the General Data Protection Regulation 18.4MB

Download file 1

Corrigendum to the Decision of the Data Protection Commission, adopted 20 August 2021, and made pursuant to Section 111 of the Data Protection Act, 2018 and Articles 60 and 65 of the General Data Protection Regulation concerning WhatsApp Ireland Limited 61.8KB

Download file 2

Opinion / Binding decision References

Binding decision 1/2021 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding WhatsApp Ireland under Article 65(1)(a) GDPR

EDPB Annual Report 2024

23 April 2025

Annual report

Protecting personal data in a changing landscape

Guidelines 02/2025 on processing of personal data through blockchain technologies

14 April 2025

Viešosios konsultacijos

Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”

14 April 2025

Opinion of the Board (Art. 64)

AI Privacy Risks & Mitigations Large Language Models (LLMs)

10 April 2025

Support Pool of Experts projects

The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical mitigation measures for common privacy risks in LLM systems.
In addition, the report provides use cases examples on the application of the risk management framework in real-world scenarios:

first use case: a virtual assistant (chatbot) for customer queries,
second use case: LLM system for monitoring and supporting student progress and,
third use case: AI assistant for travel and schedule management.

Large Language Models (LLMs) represent a transformative advancement in artificial intelligence. They are deep learning models designed to process and generate human-like language trained on extensive datasets. Their applications are diverse, ranging from text generation and summarisation to coding assistance, sentiment analysis, and more.

The EDPB launched this project in the context of the Support Pool of Experts programme at the request of the Croatian Data Protection Authority (DPA).

Project completed by the external expert Isabel Barbera in April 2025.

Objective

The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology to systematically identify, assess, and mitigate privacy and data protection risks.

The report helps Data Protection Authorities (DPAs) to have a comprehensive understanding and state-of-the-art information on the functioning of LLMs systems and the risks associated with LLMs.

Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group

9 April 2025

Opinion of the Board (Art. 64)