Resources

OH Digitale Dienste version 1.2 by German data protection authority

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

French Data Protection Authority (CNIL)-Municipality of Korou (7/22/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hessen-Company (7/15/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Hellenic Data Protection Authority (HDPA)-Ministry of Rural Development and Food (1/29/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Municipality of Athens (1/29/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy

Austrian Data Protection Authority (dsb)-Unknown (12/12/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Unknown (12/7/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/21/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

French Data Protection Authority (CNIL)-Kourou municipality (12/12/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-SAF LOGISTICS (9/18/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data minimisation, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (1/25/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (6/2/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Website operator (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy, Lawfulness of Processing

Hellenic Data Protection Authority (HDPA)-ΜΑΡΙΑ ΠΕΔΙΩΤΗ ΚΑΙ ΣΙΑ Ο.Ε. (12/19/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Hellenic Data Protection Authority (HDPA)-Intellexa SA (1/13/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy

Polish National Personal Data Protection Office (UODO)-Unknown (8/31/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (3/23/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Oroklini Municipal Council (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Physician (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Cyprus Judo Federation (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Hellenic Data Protection Authority (HDPA)-Pediatric psychologist (6/29/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Mediterranean Hospital of Cyprus (9/17/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Pactum Poland Sp. z o.o. (12/1/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Austrian Data Protection Authority (dsb)-Unknown (2/12/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy

Information Commissioner of Isle of Man-Cosmetic Medical Limited (12/11/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy

French Data Protection Authority (CNIL)-Société nouvelle de l’annuaire français (9/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-PNP S.A. (4/27/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-La Santrade S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Funeda Sp. z o.o. (3/19/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Dreamtime Call S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Polish National Personal Data Protection Office (UODO)-Anwara Sp. z.o.o. (1/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Cypriot Data Protection Commissioner-Cypriot Real Estate Registration Authority (3/3/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Smart Cities Sp. z o.o. (12/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (11/6/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy

Polish National Personal Data Protection Office (UODO)-Entrepreneur running a non-public nursery and pre-school (6/3/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de proprietari Militari R (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Office for geodesy and cartography (7/15/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/2/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-East Power Sp. z o.o. (7/10/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Belgian Data Protection Authority (APD)-Unknown (6/16/2020)

Access Requests (DSAR), Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Vis Consulting Sp. z o.o. (3/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Belgian Data Protection Authority (APD)-Proximus SA (4/28/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Representative

Commission for Personal Data Protection (KZLD)-B.D. (10/7/2019)

Controllers and Processors, Cooperation with Supervisory Authorithy

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (10/16/2019)

Controllers and Processors, Cooperation with Supervisory Authorithy

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research

Material scope, Scientific Research, Specific processing situations

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Guidelines 07/2022 on certification as a tool for transfers

Certification

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation