European Data Protection Board

Register for Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

Description Type Member states Date Topics Document Opinion / Binding decision References
Decision in the matter of Twitter International Company made pursuant to Section 111 of the Data Protection Act 2018 SA Ireland 09 December 2020 Administrative fines, Data Breach Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR
Bulgaria Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities SA Bulgaria 25 March 2019 Opinions of the EDPB, Transfers of Data Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Danish accreditation requirements for a GDPR code of conduct SA Denmark 12 November 2020 Accountability, Code of conduct, Opinions of the EDPB Opinion 19/2020 on the draft decision of the competent supervisory authority of Denmark regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
Romania SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Romania 18 October 2018 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 19/2018 on the draft list of the competent supervisory authority of Romania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Irish accreditation requirements for a code of conduct monitoring body under the GDPR SA Ireland 09 October 2020 Accountability, Code of conduct, Opinions of the EDPB Opinion 11/2020 on the draft decision of the competent supervisory authority of Ireland regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
Malta SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Malta 16 October 2018 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 15/2018 on the draft list of the competent supervisory authority of Malta regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Irish additional accreditation requirements for certification bodies SA Ireland 01 June 2020 Accountability, Opinions of the EDPB Opinion 14/2020 on the draft decision of the competent supervisory authority of Ireland regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
Czech Republic SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Czech Republic 08 February 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 4/2018 on the draft list of the competent supervisory authority of Czech Republic regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA Estonia 19 March 2019 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 6/2018 on the draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
United Kingdom SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) SA United Kingdom 18 December 2018 Data Protection Impact Assessment (DPIA), Opinions of the EDPB Opinion 22/2018 on the draft list of the competent supervisory authority of the United Kingdom regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)

Pages