Country
EU
Austria
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Data subject rights forms
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - form to report a personal data breach by the controller itself. The form is not suitable for complaints.
Belgium
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/boost.jpg?itok=yLk7C_1p)
PDF - GDPR brochure for SMEs
Boost het bewustzijn van de Belgische KMO’s en de naleving van de AVG, met speciale aandacht voor drie nalevingsthema’s
Boost het bewustzijn van de Belgische KMO’s en de naleving van de AVG, met speciale aandacht voor drie nalevingsthema’s
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/be_sa_-_video_lanalyse_dimpact_relative_a_la_protection_des_donnees.png?itok=Ga-81pYU)
VIDEO - the Data Protection Impact Assessments (DPIAs)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/be_sa_-_la_gestion_des_droits_des_personnes_0.png?itok=xktixA97)
PDF - Règlement général sur la protection des données (RGPD)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/be_sa_-_rgpd_vade-mecum_pour_les_pme.jpg?itok=6NiYQzjX)
PDF - GDPR brochure for SMEs
Un guide pour préparer les petites et moyennes entreprises (PME) au Règlement général sur la protection des données
Un guide pour préparer les petites et moyennes entreprises (PME) au Règlement général sur la protection des données
Bulgaria
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_legal_bases_for_data_processing_0.png?itok=YVmi25nV)
PDF - Legal grounds for lawful personal data processing
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_transfers_of_personal_data_to_third_countries.png?itok=7NbKDTWS)
PDF - Transfers of Personal Data to Third Countries
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_big_data_and_related_profiling_brochure_for_data_controllers.png?itok=ncNi236T)
PDF - Big Data and related profiling, brochure for data controllers
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_big_data_and_related_profiling_capability_brochure_for_individuals.png?itok=cTQreHBD)
PDF - Big Data and related profiling capability, brochure for individuals
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_10_practical_steps_in_applying_gdpr_0.png?itok=0KkP0Wjv)
Brochures - 10 Practical Steps in Applying GDPR
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79.png?itok=-799-qua)
Website guide - Personal data and its protection: everything about them and how to keep it (text of an information and explanatory brochure intended for children)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_new_elements_of_data_subject_rights_under_gdpr.png?itok=nddfF9t1)
PDF - New elements of data subject rights under GDPR
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_legal_bases_for_data_processing_0.png?itok=YVmi25nV)
PDF - Legal bases for data processing
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_legal_bases_for_data_processing.png?itok=xs7WlzUy)
PDF - Legal grounds for lawful personal data processing
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/bg_sa_-_threats_and_challenges_to_the_protection_of_personal_data.png?itok=yZnZU6uf)
PDF - Contemporary threats and challenges to the protection of personal data in the context of trends in the development of artificial intelligence and new technologies for facial recognition
Cyprus
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - The Office of the Commissioner for Personal Data Protection form for lodging a complaint about receiving messages or calls for direct marketing
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/cy_sa_-_data_breach_en.jpg?itok=wHrdQIV-)
Docx - The Office of the Commissioner for Personal Data Protection forms for data breach notification
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/cy_sa_-_recordofactivities_en.jpg?itok=IZQJsVG9)
PDFs and xlsx - The Office of the Commissioner for Personal Data Protection guidelines and forms for record of processing activities available in Greek and English
Denmark
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - The Danish Data Protection Authority form contract between data controller and processor
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Data Breach notification form - Er du selv dataansvarlig, kan du anmelde brud på persondatasikkerheden til Datatilsynet.
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - The Danish Data Protection Authority form contract between data controller and processor
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - The Danish Data Protection Authority template for joint data controllers
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - The Danish Data Protection Authority templates for meeting the obligation to provide information and the right of access
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - List of types of data processing that always requires a DPIA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/privacy-compass.jpg?itok=qDPS47v9)
Privacy compass - Online test: Introduction to personal data, 'Rights of data subjects'
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/da_sa_-_podcast.png?itok=dXyBT4Od)
Podcast on GDPR - In each episode, different employees from the Danish Data Protection Agency take on the role of host and talk about a topic that is particularly relevant for small and medium-sized
Estonia
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Data protection impact assessment’s guidance and form
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/ee_sa_-_interactive_template_for_video_surveillance_signs.jpg?itok=DW61_o7m)
Website guideline - Interactive template for video surveillance signs
Finland
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
An online tool for SMEs to assess how they meet the requirements of the GDPR
France
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/fr_sa_-_approbation_des_bcr_les_differentes_etapes.png?itok=fcKR1DtR)
PDF - Approval of BCRs: the different stages infographic
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/fr_sa_-_la_certification.jpg?itok=5AFkxJ-3)
Website guide - What is certification? What products or services can be certified? What are the steps to get a certification mechanism approved?
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79.png?itok=-799-qua)
Website lists - Lists of processing operations for which a DPIA is required or not
Germany
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Contract template between data controller and processor.
By LfDI - Baden-Wuerttemberg
By LfDI - Baden-Wuerttemberg
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Contract template between data controller and processor.
By LfDI - Baden-Wuerttemberg
By LfDI - Baden-Wuerttemberg
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/de_sa_-_checkliste_lfd.jpg?itok=ei9wA_H8)
Checklist of technical and organisational measures.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/de_sa_-_data_protection_for_telecommunications.jpg?itok=ucbTA4Ia)
Website guide - Data protection for telecommunications.
By BfDI - Federal German DPA
By BfDI - Federal German DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/de_sa_-_data_protection_when_uploading_or_embedding_videos_on_websites.jpg?itok=VFuA-K2g)
Website guide - Data protection when uploading or embedding videos on websites.
By LfDI - Baden-Württemberg DPA
By LfDI - Baden-Württemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Guidelines on Personal Data Protection.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Website guide - Data Protection Impact Assessment.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Trainings on data protection issues particularly for SME in our schooling center (Bildungszentrum BIDIB).
By LfDI - Baden-Württemberg DPA
By LfDI - Baden-Württemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/de_sa_-_faq_on_cookies_and_tracking.jpg?itok=7X7wIGyT)
Website guide - FAQ on cookies and tracking.
By LfDI - Baden-Württemberg DPA
By LfDI - Baden-Württemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template consent form.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Docx - Processing personal data template form.
By LDA - Brandenburg DPA
By LDA - Brandenburg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Template for the contract between data controller and processor.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Questionnaire for SMEs on the GDPR.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Form to submit data breach notifications.
By LfDI - Baden-Wuerttemberg
By LfDI - Baden-Wuerttemberg
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Common causes of data breaches and countermeasures.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Information on the collection of personal data in accordance with Articles 13, 14 and 21 of the General Data Protection Regulation - implementation aid for the data protection notices.
By LDI - North Rhine-Westphalia DPA
By LDI - North Rhine-Westphalia DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/de_sa_-_essential_requirements_for_small_companies.jpg?itok=r5NaTFrR)
Overview of the essential requirements for small companies are compiled as examples.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Website guide - Information on data breach reports.
By BfDI - Federal German DPA
By BfDI - Federal German DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Form on joint responsibility.
By LfDI - Baden-Wuerttemberg DPA
By LfDI - Baden-Wuerttemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
List of GDPR guidelines.
By the DSK - Datenschutzkonferenz, Conference of the Independent Data Protection Authorities of Germany
By the DSK - Datenschutzkonferenz, Conference of the Independent Data Protection Authorities of Germany
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Template for data protection notices for websites of non-public bodies.
By LDI - North Rhine-Westphalia DPA
By LDI - North Rhine-Westphalia DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for the appointment of data protection officers
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - templates for data subject rights, the creation of a list of processing activities or for a contract for order processing.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Online form for Data Breach notification.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Information about taking photos and video recording.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Guidelines and form on Personal Data Protection.
By LDA - Brandenburg DPA
By LDA - Brandenburg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/de_sa_-_handout_on_data_protection_issues_when_taking_photos.jpg?itok=zbU81iW_)
PDF - handout on data protection issues when taking photos.
By LfDI - Baden-Württemberg DPA
By LfDI - Baden-Württemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Sample processing directory according to Article 30 GDPR for those responsible and processors,
LDI - North Rhine-Westphalia DPA
LDI - North Rhine-Westphalia DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
List of processing operations pursuant to Article 30 of the GDPR.
By LDI - North Rhine-Westphalia DPA
By LDI - North Rhine-Westphalia DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for a joint controllership contract.
By LfDI - Baden-Wuerttemberg DPA
By LfDI - Baden-Wuerttemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for a joint controllership contract.
By LfDI - Baden-Wuerttemberg DPA
By LfDI - Baden-Wuerttemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - List of processing activities, Art. 30 GDPR.
By LfDI - Baden-Württemberg DPA
By LfDI - Baden-Württemberg DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
General overview plus template for video surveillance notice.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
XLXS - Template for records of processing activities.
By LfDI - Baden-Wuerttemberg
By LfDI - Baden-Wuerttemberg
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Withdrawal of consent template form.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Right to object template form.
By BayLDA - Bavaria DPA
By BayLDA - Bavaria DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - How does advertising work in accordance with data protection?
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - How to protect data carriers according to GDPR.
By LfD - Saxony-Anhalt DPA
By LfD - Saxony-Anhalt DPA
Greece
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/el_sa_-_bydesign_guidance_documentation.jpg?itok=pFO7LIiz)
Training programme and guidance documentation on data protection by design for the ICT sector developed in collaboration with University of Piraeus and the IT company, ICT Abovo.
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/el_sa_-_bydesign_guidance_documentation.jpg?itok=pFO7LIiz)
Questionnaire - user-friendly Online Toolkit has been developed particularly tailored to the needs of the SMEs, facilitating GDPR compliance with a set of context-aware templates of essential documents.
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/el_sa_-_bydesign_guidance_documentation.jpg?itok=pFO7LIiz)
Questionnaire - user-friendly Online Toolkit has been developed particularly tailored to the needs of the SMEs, facilitating GDPR compliance with a set of context-aware templates of essential documents.
Hungary
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/hu_sa_-_user-friendly_handbook_guidance_practical_suggestions_for_smes.png?itok=3SEZNZXi)
PDF - user-friendly handbook offers guidance and practical suggestions for SMEs and it explains
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/hu_sa_-_digital_guidance_for_dpas_on_good_practices_in_running_a_hotline_and_raising_sme_awareness.png?itok=vyqBJvX3)
PDF - STAR Project: digital guidance for DPAs on good practices in running a hotline and raising SME awareness
Ireland
Italy
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/it_sa_-_dpo_0.jpg?itok=TkRqeYoG)
Guidelines and FAQ on the Data Protection Officer, DPO
Lithuania
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/lt_sa_-_del_standartiniu_sutarciu_salygu_asmens_duomenu_tvarkymo_sutartys.png?itok=4TFgcZ1w)
Online form - Template for the contract between data controller and processor
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/lt_sa_-_duk.jpg?itok=Bh9f3ADl)
PDF - Guideline for video surveillance notice.
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Word file - DPIA checklist or self-test forms or tools
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Data Protection Impact Assessment (DPIA) form
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template of Application for prior consultation
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template of Application for prior consultation
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Form for personal data breach notification
![Rekomendaciją dėl duomenų tvarkymo veiklos įrašų](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/lt_sa_-_rekomendacija_del_duomenu_tvarkymo_veiklos_irasu.jpg?itok=gU8DpDln)
DOCX - Template Record of processing activities for data controllers and processors
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Form Standard contractual clauses for the data processing agreement
Luxembourg
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/lu_sa_-_application_form_for_accreditation.jpg?itok=tyEcVcFV)
Docx - Form intended for organizations that want to apply for accreditation from the CNPD for delivering the GDPR-CARPA certification
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/lu_sa_-_les_mecanismes_de_certification_en_matiere_de_protection_des_donnees.jpg?itok=uVTQSzT2)
Data protection certification mechanisms guideline
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/lu_sa_-_lignes_directrices_en_matiere_de_cookies_et_autres_traceurs.png?itok=0xjYBgLX)
Website guide, brochure & dossier thématique
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/lu_sa_-_your_data_protection_obligations.png?itok=H6aA9ohG)
PDF - Guide for businesses, public authorities and associations
Netherlands
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Step-by-step plan: how do I, as an SME, determine whether I may process personal data?
Slovenia
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_handbook_for_employeers.jpg?itok=iol08KDW)
PDF - Handbook for employees: How are data protected in employment?
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_manual_data_protection_for_teenagers.jpg?itok=EwZ5fFZ1)
PDF - "My data, my thing" MY DATA, Manual for personal protection
data
data
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_access_to_personal_data_infographic.jpg?itok=cJMkQNDL)
PDF - Unauthorised access to personal data infographic
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for notification of a personal data breach (Article 33 of the GDPR)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for application for transfer of personal data to third countries or international organisations
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Data Protection Impact Assessment (DPIA) relevance and recommendations infographic.
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_personal_data_transfer.jpg?itok=E2vlfSGz)
PDF - Infographic on personal data transfer to third countries or international organisation in 2 steps
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_guidelines_on_transfer_personal_data.jpg?itok=p8-vu1nh)
PDF - Guidelines on the transfer of personal data to third countries and international organisations
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_guideline_on_contractual_processing_personal_data.jpg?itok=0SM9P5B8)
PDF - Guidelines on the contractual processing of personal data
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_guideline_on_personal_data_protection_statement_on_the_website.jpg?itok=Kslft4Tu)
PDF - Guidelines about personal data protection statement on websites
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_impact_assessment_guideline.jpg?itok=B8qMVAw2)
PDF - Guidelines for impact assessment on personal data protection
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_guideline_for_the_use_of_gps_tracking_devices_and_the_protection_of_personal_data_0.jpg?itok=XMb7uzFL)
PDF - Guideline for the use of GPS tracking devices and the protection of personal data
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_smes_website.jpg?itok=7luxP58o)
Website - Website to help small and medium-sized enterprises
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Online form for notifying Data Protection Officers (DPO)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_handbook_on_data_protection.jpg?itok=XiTgT1B8)
PDF - Handbook on personal data protection "You decide about your data"
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/sl_sa_-_website_rights_of_individuals.jpg?itok=lMROn_Ri)
Website - Guide to the rights of individuals in the field of personal data protection
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Model records of processing activities for processors (Article 30 of the GDPR)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Model records of processing activities for controllers (Article 30 of the GDPR)
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Model notice to individuals concerning the processing of personal data (Article 13 of the GDPR)
Spain
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_asesora_brecha.png?itok=k_9npJMq)
Website guide - Tool to assess the obligation to notify the DPA about a personal data breach
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_comunica-brecha_rgpd.png?itok=_gYky4Tp)
Website guide - Tool to help controllers assess next steps following a data breach and data subjects rights obligation to communicate
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_protege_datos.jpg?itok=LtF9Je-A)
PDF - Infographic on resources to help comply with the GDPR
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Guidelines for the preparation of contracts between controllers and processors
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_evalua-riesgorgpd.jpg?itok=dgjBhsct)
Online tool for controllers and processors to assess the need of Data Protection Impact Assessment (DPIA) and risk management on personal data
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/es_sa_-_facilita_rgpd.png?itok=LYN35YUD)
Webguide site - Tool to supports entrepreneurs and start-ups with data processings
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_guideline_data_controllers.jpg?itok=CTiHx9At)
PDF - Guidelines for data controllers on GDPR
![Guidelines on Personal Data Breach Notification](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-05/es_sa_guideline_personal_data_breach.jpg?itok=A2AgGI7A)
PDF - Guidelines on personal data breach management and notification
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Web guide - resources and tools to promote compliance with the RGPD, focusing attention on supporting SMEs and entrepreneurs
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - Template clauses for data processor contracts
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
DOCX - Template for data protection impact assessment report (DPIA) for private sector
EDPS
EEA
Liechtenstein
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF and DOCX - Templates for requests for information, privacy policy, consent, contract for order processing, joint responsibility agreement and record of processing activities, etc.
Norway
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/no_sa_-_data_subject_rights.jpg?itok=Qldmve1F)
Website guide - Overview of all the rights you have under the privacy regulations when information about you is collected and used
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
Website guide - Information on the data protection officer registration
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/no_sa_-_checklist_for_business.jpg?itok=eMAe3IyY)
Checklist for business - You have a business and need to make sure you follow the privacy policy. What do you need to do to preserve the personal data of customers, users, members and your own employees?
SMEData
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - The new developments in the roles and responsibilities of the data controllers and data processors
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - The new challenges in processing special categories of data
![](/sites/default/files/styles/edpb_sme_toc_list_image/public/2023-04/edpb_data_protection_guide_79_0.png?itok=sk2mEJmV)
PDF - How to use personal data in a legal way in order to boost our marketing activities