European Data Protection Board

Register for Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

Description Type Member states Date Topics Document Opinion / Binding decision References
DK SA Standard Contractual Clauses for the purposes of compliance with art. 28 GDPR SA Denmark 10 December 2019 Controller, Processor Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)
French SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA France 12 September 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
Iceland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Iceland 29 August 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 7/2019 on the draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Iceland Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities SA Iceland 16 August 2019 Opinions of the EDPB, Transfers of Data Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Malta Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities SA Malta 13 August 2019 Opinions of the EDPB, Transfers of Data Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Poland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Poland 26 July 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 17/2018 on the draft list of the competent supervisory authority of Poland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Croatia 26 July 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 25/2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Bulgaria Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities SA Bulgaria 25 March 2019 Opinions of the EDPB, Transfers of Data Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Estonia 19 March 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 6/2018 on the draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Norway SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Norway 16 March 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 2/2019 on the draft list of the competent supervisory authority of Norway regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)

Pages