Search results | European Data Protection Board

Norway SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Norway 16 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Norwegian Data Protection Authority UNOFFICIAL … Protection Authority hereby decides, in accordance with GDPR Article 35(4), cfr. Article 57(1)(k), that the …
Finland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Finland 15 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 15.10.2018 1 (3) Office of the Data Protection … data protection impact assessment (DPIA) Article 35 (1) GDPR requires a DPIA when the processing activity is likely …
Hungarian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
23 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Hungary 23 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … Where data processing operations are likely to … European Parliament and of the Council (hereinafter ‘the GDPR’), the National Authority for Data Protection and …
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
19 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Estonia 19 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … FOR DATA PRIVACY AND FREEDOM OF INFORMATION 1 (2) … assessment In case of cross-border data processing (see GDPR art. 35 (6)), the aspect of large scale processing …
Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Croatia 26 July 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … REPUBLIC OF CROATIA PERSONAL DATA PROTECTION AGENCY … FOR WHICH A DPIA SHALL BE REQUIRED PURSUANT TO ARTICLE 35.4 GDPR Having regard to the EDPB Opinion 25/2018 on the draft …
Latvia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
14 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Latvia 14 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Approved by December 18, 2018 Order No. 1-2.1/125 … impact assessment pursuant to Article 35 (4) of the GDPR Data State Inspectorate of the Republic of Latvia …
Austria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
9 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Austria 9 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 Regulation of the Data Protection Authority on … Data Protection Regulation, hereinafter referred to as the GDPR), ABl. Nr. L 119, 4.5.2016, p. 1. Processing operations …
Slovenia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
21 December 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 Number: 014-1/2018/12 Date: 21 December 2018 … of the General Data Protection Regulation (EU) 2016/679 (GDPR) Initial statements • The list is based on Article 29 …
Poland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Poland 26 July 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … 1 The list of types of personal data processing … Data Protection Regulation), hereinafter referred to as GDPR. This list does not exempt the controller from the …
Internal EDPB Document 2/2020 on how to deal with complaints relating to data protection infringements started before the entry into application of GDPR that continue after 25 May 2018
30 June 2020
Internal documents
… infringements started before the entry into application of GDPR that continue after 25 May 2018 30 June 2020 Internal … infringements started before the entry into application of GDPR that continue after 25 May 2018 …
Czech SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 GDPR
8 January 2020
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 GDPR Decision Type SA Czech Republic 8 January 2020 Data Protection Impact Assessment (DPIA) cz_art35-5_gdpr_list_final.pdf 427.3KB Download Opinion / Binding … of a data protection impact assessment (Article 35(5) GDPR) … Czech SAs list of the kind of processing operations …
Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)
17 November 2022
Recommendations
… to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations 1/2022 on the Application for Approval … to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Start Date: 17 November 2022 End Date: 10 January 2023 … to be found in Controller Binding Corporate Rules (Art. 47 GDPR) …
Internal EDPB Document 5/2021 on handling complaints against public authorities or private bodies acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State
7 July 2021
Internal documents
… acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State 7 July 2021 Internal … acting on the basis of Article 6(1), point (c) or (e), GDPR in another EEA Member State …
Tetra Pak
20 August 2020
… accordance with Articles 46.1, 46.2 b, 47.1 and 47.2 of the GDPR (2016/679) and hereby approves the Controller BCRs of … to the Controller BCRs or to the other provisions of the GDPR. In accordance with Article 58.2 j of the GDPR, each concerned EU/EEA Data Protection Authority …
Opinion 11/2022 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
4 July 2022
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 4 July 2022 Opinion of the Board (Art. 64) Poland … … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 38/2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
20 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 20 November 2021 Opinion of the Board (Art. 64) Latvia … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 36/2021 on the draft decision of the competent supervisory authority of Norway regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
30 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 30 November 2021 Opinion of the Board (Art. 64) Norway … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 35/2021 on the draft decision of the competent supervisory authority of Belgium regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
30 November 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 30 November 2021 Opinion of the Board (Art. 64) … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
20 July 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 20 July 2021 Opinion of the Board (Art. 64) Lithuania … of a certification body pursuant to Article 43.3 (GDPR) …
Opinion 12/2021 on the draft decision of the competent supervisory authority of Portugal regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
23 March 2021
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 23 March 2021 Opinion of the Board (Art. 64) Portugal … of a certification body pursuant to Article 43.3 (GDPR) …