EDPB guidelines
Guidelines and opinions adopted by the European Data Protection Board to ensure consistent application of the GDPR.
Overview
EDPB guidelines interpret key GDPR concepts such as consent, legitimate interest, data transfers and breach notification. National data protection authorities follow them in enforcement.
As guidance it may not be binding on its own, but examiners and enforcement staff routinely apply it. The authorities most closely connected to it are EDPB. It is often read together with GDPR.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
Guidance shows how the authority will judge compliance, so it shapes examinations even when it is not formally binding.
Who it affects
Organisations supervised by EU data protection authorities.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to EDPB guidelines. Select one to open it.
What to do about it
- 1Identify which obligations it interprets.
- 2Compare it with how your controls work today and draft changes.
- 3Record the decision and the reasoning behind it.
- 4Watch for updates, replacement or withdrawal.
From requirement to evidence.
Regulation Layer tracks it as layer three and drafts an impact note for every control a new item touches.
Request early access →