ARTICLE 29 WORKING PARTY - GUIDELINES

Below you may find the Guidelines adopted by the Article 29 Working Party relating to the GDPR The Working Party existed prior to the implementation of the GDPR having been set up under Directive 95/46/EC.

Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679

Guidelines on the application and setting of administrative fines for the purposes of the Regulation 2016/679

Guidelines on transparency under Regulation 2016/679

Guidelines on consent under Regulation 2016/679

Guidelines on the right to data portability

Guidelines on Data Protection Officers (‘DPOs’)

Guidelines for identifying a controller or processor’s lead supervisory authority

Guidelines on Personal data breach notification under Regulation 2016/679

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

(‘© European Union, https://eur-lex.europa.eu, 1995-2019)

EUROPEAN DATA PROTECTION BOARD - GUIDELINES

On 25 May 2018, the Article 29 Working Party was transformed into the European Data Protection Board (hereinafter the EDPB) which was set up as an EU agency.  The EDPB incorporated accepted the Article 29 Working Party’s guidelines and issued its own new guidelines on specific issues related to the GDPR. You can find the guidelines in this section.