EDPB Guidelines – Exhaustive List
Source: edpb.europa.eu – Guidelines
Last updated: 2026-03-17
Scope: All guidelines published under the EDPB “Guidelines” document category, including WP29-era guidelines formally endorsed by the EDPB on 25 May 2018. Only the latest version of each guideline is retained (obsolete first-draft consultation versions are collapsed into the final/latest version entry). Sorted by publication date of the latest version, most recent first.
Note on ”/” in references: Obsidian does not allow the ”/” character in note titles; existing vault notes therefore use ”-” as a substitute (e.g. “01-2022” instead of “01/2022”).
2025–2026
2024
2023
Name Reference Date (latest ver.) Version Official link Vault note Guidelines 03/2021 on the application of Article 65(1)(a) GDPR 03/2021 2023-05-24 2.0 edpb.europa.eu — Guidelines 04/2022 on the calculation of administrative fines under the GDPR 04/2022 2023-05-24 2.1 edpb.europa.eu — Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement 05/2022 2023-05-17 2.0 edpb.europa.eu — Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority 8/2022 2023-04-17 2.1 edpb.europa.eu — Guidelines 01/2022 on data subject rights – Right of access 01/2022 2023-04-17 2.1 edpb.europa.eu EDPB Guidelines 01-2022 on data subject rights - Right of access Version 2.1 Guidelines 9/2022 on personal data breach notification under GDPR 9/2022 2023-04-04 2.0 edpb.europa.eu — Guidelines 07/2022 on certification as a tool for transfers 07/2022 2023-02-14 2.0 edpb.europa.eu — Guidelines 05/2021 on the Interplay between Art. 3 and international transfers (Chapter V GDPR) 05/2021 2023-02-14 2.0 edpb.europa.eu — Guidelines 3/2022 on deceptive design patterns in social media platform interfaces 3/2022 2023-02-07 2.0 edpb.europa.eu —
2022
2021
Name Reference Date (latest ver.) Version Official link Vault note Guidelines 10/2020 on restrictions under Article 23 GDPR 10/2020 2021-10-13 2.1 edpb.europa.eu — Guidelines 8/2020 on the targeting of social media users 8/2020 2021-04-13 2.0 edpb.europa.eu — Guidelines 09/2020 on relevant and reasoned objection under GDPR 09/2020 2021-03-09 1.0 edpb.europa.eu — Guidelines 07/2020 on the concepts of controller and processor in the GDPR 07/2020 2021-07-07 2.0 edpb.europa.eu — Guidelines 02/2021 on Virtual Voice Assistants 02/2021 2021-07-07 2.0 edpb.europa.eu — Guidelines 2/2020 on Art. 46(2)(a) & 46(3)(b) for transfers between EEA and non-EEA public authorities 2/2020 2021-02-15 2.0 edpb.europa.eu —
2020
Name Reference Date (latest ver.) Version Official link Vault note Guidelines 4/2019 on Article 25 – Data Protection by Design and by Default 4/2019 2020-10-20 2.0 edpb.europa.eu — Guidelines 5/2019 on criteria of the Right to be Forgotten in search engines cases (part 1) 5/2019 2020-07-07 2.0 edpb.europa.eu — Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR 06/2020 2020-11-17 2.0 edpb.europa.eu — Guidelines 05/2020 on consent under Regulation 2016/679 05/2020 2020-05-04 1.1 edpb.europa.eu — Guidelines 04/2020 on the use of location data and contact tracing tools (COVID-19) 04/2020 2020-05-21 2.0 edpb.europa.eu — Guidelines 03/2020 on processing health data for scientific research in context of COVID-19 03/2020 2020-04-21 1.0 edpb.europa.eu — Guidelines 3/2019 on processing of personal data through video devices 3/2019 2020-01-29 2.0 edpb.europa.eu — Guidelines 1/2020 on processing personal data in connected vehicles and mobility-related applications 1/2020 2020-02-19 1.0 edpb.europa.eu —
2019
Name Reference Date (latest ver.) Version Official link Vault note Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) 3/2018 2019-11-12 2.1 edpb.europa.eu — Guidelines 1/2018 on certification and identifying certification criteria (Art. 42 & 43 GDPR) 1/2018 2019-06-04 3.0 edpb.europa.eu — Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679 1/2019 2019-06-04 2.0 edpb.europa.eu — Guidelines 2/2019 on processing personal data under Art. 6(1)(b) in context of online services 2/2019 2019-10-16 2.0 edpb.europa.eu —
2018 — EDPB adopted & WP29-era guidelines endorsed by EDPB (25 May 2018)
Name Reference Date (latest ver.) Version Official link Vault note Guidelines 02/2018 on derogations of Article 49 under Regulation 2016/679 02/2018 2018-05-25 1.0 edpb.europa.eu Guidelines 2018-02 on derogations of Article 49 under Regulation 2016-679 Guidelines on automated decision-making and profiling (WP251 rev.01) WP251/2018 2018-05-25 WP251 rev.01 edpb.europa.eu — Guidelines on personal data breach notification under Regulation 2016/679 (WP250 rev.01) WP250/2018 2018-05-25 WP250 rev.01 edpb.europa.eu — Guidelines on Data Protection Impact Assessments – high risk processing (WP248 rev.01) WP248/2018 2018-05-25 WP248 rev.01 edpb.europa.eu — Guidelines on transparency under Regulation 2016/679 (WP260) WP260/2018 2018-05-25 WP260 edpb.europa.eu — Guidelines on Data Protection Officers (WP243 rev.01) WP243/2018 2018-05-25 WP243 rev.01 edpb.europa.eu — Guidelines on identifying a controller or processor’s lead supervisory authority (WP244 rev.01) WP244/2018 2018-05-25 WP244 rev.01 edpb.europa.eu — Guidelines on consent under Regulation 2016/679 (WP259 rev.01) WP259/2018 2018-05-25 WP259 rev.01 edpb.europa.eu — Guidelines on the right to data portability (WP242 rev.01) WP242/2018 2018-05-25 WP242 rev.01 edpb.europa.eu — Guidelines on the application and setting of administrative fines (WP253) WP253/2018 2018-05-25 WP253 edpb.europa.eu — Guidelines on Binding Corporate Rules for processors (WP257) WP257/2018 2018-05-25 WP257 edpb.europa.eu — Guidelines on personal data breach notification (WP213 rev.01) WP213/2018 2018-05-25 WP213 rev.01 edpb.europa.eu —
Note: The “Vault note” column links to existing notes in this vault. Notes in Work/Tech Data/Privacy/EDPB Guidelines/ use the format EDPB Guidelines XX-YYYY … (with ”-” replacing the EDPB’s ”/” in reference numbers). Notes without a vault link have not yet been imported.