Study on the national administrative rules impacting the cooperation duties for the national supervisory authorities

13 April 2023

Please note that the completion of this study dates back to 2020: therefore, some of the information included therein may no longer be up to date.

Study on the national administrative rules impacting the cooperation duties for the national supervisory authorities 1.2MB

Descarga

GDPR enforcement

The EDPB may commission contractors to provide legal studies on specific topics. Following the decision of the plenary meeting of the EDPB of 14 December 2021, legal studies which have been initiated with approval by the EDPB members are being published on this page. This page will be updated periodically.

The views expressed in the legal studies are those of their authors and they do not necessarily reflect the official position of the EDPB. The EDPB does not guarantee the accuracy of the information included in the legal studies.

Neither the EDPB nor any person acting on the EDPB’s behalf may be held responsible for any use which may be made of the information contained in the legal studies.

Some excerpts have been redacted from the legal studies as their publication would undermine the protection of legitimate interests, including, inter alia, the privacy and integrity of an individual regarding the protection of personal data in accordance with Regulation (EU) 2018/1725 and/or the commercial interests of a natural or legal person.

AI Privacy Risks & Mitigations Large Language Models (LLMs)

10 April 2025

Support Pool of Experts projects

The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology for LLM systems with a number of practical mitigation measures for common privacy risks in LLM systems.
In addition, the report provides use cases examples on the application of the risk management framework in real-world scenarios:

first use case: a virtual assistant (chatbot) for customer queries,
second use case: LLM system for monitoring and supporting student progress and,
third use case: AI assistant for travel and schedule management.

Large Language Models (LLMs) represent a transformative advancement in artificial intelligence. They are deep learning models designed to process and generate human-like language trained on extensive datasets. Their applications are diverse, ranging from text generation and summarisation to coding assistance, sentiment analysis, and more.

The EDPB launched this project in the context of the Support Pool of Experts programme at the request of the Croatian Data Protection Authority (DPA).

Project completed by the external expert Isabel Barbera in February 2023.

Objective

The AI Privacy Risks & Mitigations Large Language Models (LLMs) report puts forward a comprehensive risk management methodology to systematically identify, assess, and mitigate privacy and data protection risks.

The report helps Data Protection Authorities (DPAs) to have a comprehensive understanding and state-of-the-art information on the functioning of LLMs systems and the risks associated with LLMs.

Opinion 5/2025 on the draft decision of the Finnish Supervisory Authority regarding the Processor Binding Corporate Rules of the Nokia Group

9 April 2025

Opinion of the Board (Art. 64)

Opinion 4/2025 on the draft decision of the Finnish Supervisory Authority regarding the Controller Binding Corporate Rules of the Nokia Group

9 April 2025

Opinion of the Board (Art. 64)

Study on the secondary use of personal data in the context of scientific research

3 April 2025

Other

EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors

19 March 2025

Procedure