Below we identify resources from the Article 29 Working Party related to the GDPR.


Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679 (adopted April 4, 2017, last revised and adopted Oct. 4, 2017)  Guidelines



Guidelines on the right to data portability (adopted Dec. 13, 2016, last revised and adopted April 5, 2017)  Guidelines



Guidelines on Data Protection Officers (‘DPOs’) (adopted Dec. 13, 2016, last revised and adopted April 5, 2017) - Guidelines



Guidelines for identifying a controller or processor’s lead supervisory authority (adopted Dec. 13, 2016, last revised and adopted April 5, 2017)  Guidelines



Guidelines on the application and setting of administrative fines for the purposes of the Regulation 2016/679 (adopted Oct. 3, 2017)  Guidelines



Draft - Guidelines on Personal data breach notification under Regulation 2016/679 (adopted Oct. 3, 2017)  Draft Guidelines



Draft - Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679 (adopted Oct. 3, 2017)  Draft Guidelines



Draft - Adequacy Referential (updating guidance on transfers of personal data to third countries -Chapter One of WP12) (adopted Nov. 28, 2017)  Draft Guidelines



Draft - Working Document setting up a table with the elements and principles to be found in Binding Corporate Rules (adopted Nov. 28, 2017)  Draft Guidelines



Draft - Working Document setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (adopted Nov. 28, 2017)  Draft Guidelines



Draft - Guidelines on Consent under Regulation 2016/679 (adopted Nov. 28, 2017)  Draft Guidelines



Draft - Guidelines on transparency under Regulation 2016/679 (published Dec. 2017Draft Guidelines



Opinion 01/2017 on the Proposed Regulation for the ePrivacy Regulation (2002/58/EC) (adopted April 4, 2017)  Opinion



Opinion 2/2017 on data processing at work (adopted June 8, 2017)  Opinion



Opinion 03/2017 on Processing personal data in the context of Cooperative Intelligent Transport Systems (C-ITS) (adopted Oct. 4, 2017)  Opinion



Opinion on some key issues of the Law Enforcement Directive (EU 2016/680) (adopted Nov. 29, 2017)  Opinion


Last edited 04.12.2018