--- title: 3. Guidelines (EDPB) Language: - English cssclasses: - homepage modified: null --- # EDPB Guidelines – Exhaustive List > **Source:** [edpb.europa.eu – Guidelines](https://www.edpb.europa.eu/our-work-tools/our-documents/publication-type/guidelines_en) > **Last updated:** 2026-03-17 > **Scope:** All guidelines published under the EDPB "Guidelines" document category, including WP29-era guidelines formally endorsed by the EDPB on 25 May 2018. Only the latest version of each guideline is retained (obsolete first-draft consultation versions are collapsed into the final/latest version entry). Sorted by publication date of the latest version, most recent first. > **Note on "/" in references:** Obsidian does not allow the "/" character in note titles; existing vault notes therefore use "-" as a substitute (e.g. "01-2022" instead of "01/2022"). --- ## 2025–2026 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Joint Guidelines on the interplay between the DMA and the GDPR | Joint GL/2025 | 2025-10-09 | 1.0 (consultation) | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2025/joint-guidelines-interplay-between-digital_en) | — | | Guidelines 3/2025 on the interplay between the DSA and the GDPR | 3/2025 | 2025-09-12 | 1.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2025/guidelines-32025-interplay-between-dsa-and-gdpr_en) | — | | Guidelines 02/2024 on Article 48 GDPR | 02/2024 | 2025-06-05 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-022024-article-48-gdpr_en) | [[EDPB Guidelines 2024-02 on Article 48 GDPR]] | | Guidelines 02/2025 on processing of personal data through blockchain technologies | 02/2025 | 2025-04-14 | 1.0 (consultation) | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2025/guidelines-022025-processing-personal-data_en) | [[EDPB Guidelines 2025-02 on processing of personal data through blockchain technologies]] | | Guidelines 01/2025 on Pseudonymisation | 01/2025 | 2025-01-17 | 1.0 (consultation) | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2025/guidelines-012025-pseudonymisation_en) | [[SiteMap/3-Guidelines/EDPB Guidelines/EDPB Guidelines 2025-01 on Pseudonymisation]] | ## 2024 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive | 2/2023 | 2024-10-16 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-22023-technical-scope-art-53-eprivacy-directive_en) | — | | Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR (legitimate interest) | 1/2024 | 2024-10-08 | 1.0 (consultation) | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/documents/public-consultations/2024/guidelines-12024-processing-personal-data-based_en) | [[SiteMap/3-Guidelines/EDPB Guidelines/EDPB Guidelines 2024-01 on processing of personal data based on Article 6(1)(f) GDPR]] | | Guidelines 01/2023 on Article 37 Law Enforcement Directive | 01/2023 | 2024-06-19 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-012023-article-37-law-enforcement-directive_en) | — | ## 2023 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | | ----------------------------------------------------------------------------------------------- | --------- | ------------------ | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- | | Guidelines 03/2021 on the application of Article 65(1)(a) GDPR | 03/2021 | 2023-05-24 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032021-application-article-651a-gdpr_en) | — | | Guidelines 04/2022 on the calculation of administrative fines under the GDPR | 04/2022 | 2023-05-24 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-042022-calculation-administrative-fines-under_en) | — | | Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement | 05/2022 | 2023-05-17 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052022-use-facial-recognition-technology-area_en) | — | | Guidelines 8/2022 on identifying a controller or processor's lead supervisory authority | 8/2022 | 2023-04-17 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-82022-identifying-controller-or-processors-lead_en) | — | | Guidelines 01/2022 on data subject rights – Right of access | 01/2022 | 2023-04-17 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-012022-data-subject-rights-right-access_en) | [[EDPB Guidelines 01-2022 on data subject rights - Right of access Version 2.1]] | | Guidelines 9/2022 on personal data breach notification under GDPR | 9/2022 | 2023-04-04 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-92022-personal-data-breach-notification-under_en) | — | | Guidelines 07/2022 on certification as a tool for transfers | 07/2022 | 2023-02-14 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-072022-certification-tool-transfers_en) | — | | Guidelines 05/2021 on the Interplay between Art. 3 and international transfers (Chapter V GDPR) | 05/2021 | 2023-02-14 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052021-interplay-between-application-article-3_en) | — | | Guidelines 3/2022 on deceptive design patterns in social media platform interfaces | 3/2022 | 2023-02-07 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032022-deceptive-design-patterns-social-media_en) | — | ## 2022 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 06/2022 on the practical implementation of amicable settlements | 06/2022 | 2022-06-14 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-062022-practical-implementation-amicable_en) | — | | Guidelines 02/2022 on the application of Article 60 GDPR | 02/2022 | 2022-03-14 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-022022-application-article-60-gdpr_en) | — | | Guidelines 04/2021 on codes of conduct as tools for transfers | 04/2021 | 2022-03-14 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-042021-codes-conduct-tools-transfers_en) | — | | Guidelines 01/2021 on Examples regarding Personal Data Breach Notification | 01/2021 | 2022-01-03 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-012021-examples-regarding-personal-data-breach_en) | [[SiteMap/3-Guidelines/EDPB Guidelines/EDPB Guidelines 2021-01 on Examples regarding Personal Data Breach Notification]] | ## 2021 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 10/2020 on restrictions under Article 23 GDPR | 10/2020 | 2021-10-13 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-102020-restrictions-under-article-23-gdpr_en) | — | | Guidelines 8/2020 on the targeting of social media users | 8/2020 | 2021-04-13 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-082020-on-targeting-social-media-users_en) | — | | Guidelines 09/2020 on relevant and reasoned objection under GDPR | 09/2020 | 2021-03-09 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-092020-relevant-and-reasoned-objection-under_en) | — | | Guidelines 07/2020 on the concepts of controller and processor in the GDPR | 07/2020 | 2021-07-07 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-072020-concepts-controller-and-processor_en) | — | | Guidelines 02/2021 on Virtual Voice Assistants | 02/2021 | 2021-07-07 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-022021-virtual-voice-assistants_en) | — | | Guidelines 2/2020 on Art. 46(2)(a) & 46(3)(b) for transfers between EEA and non-EEA public authorities | 2/2020 | 2021-02-15 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-22020-articles-462-and-463-regulation_en) | — | ## 2020 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 4/2019 on Article 25 – Data Protection by Design and by Default | 4/2019 | 2020-10-20 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-42019-article-25-data-protection-design-and_en) | — | | Guidelines 5/2019 on criteria of the Right to be Forgotten in search engines cases (part 1) | 5/2019 | 2020-07-07 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-52019-criteria-right-be-forgotten-search-engines_en) | — | | Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR | 06/2020 | 2020-11-17 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-062020-interplay-second-payment-services_en) | — | | Guidelines 05/2020 on consent under Regulation 2016/679 | 05/2020 | 2020-05-04 | 1.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052020-consent-under-regulation-2016679_en) | — | | Guidelines 04/2020 on the use of location data and contact tracing tools (COVID-19) | 04/2020 | 2020-05-21 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-042020-use-location-data-and-contact-tracing_en) | — | | Guidelines 03/2020 on processing health data for scientific research in context of COVID-19 | 03/2020 | 2020-04-21 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-032020-processing-data-concerning-health_en) | — | | Guidelines 3/2019 on processing of personal data through video devices | 3/2019 | 2020-01-29 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32019-processing-personal-data-through-video_en) | — | | Guidelines 1/2020 on processing personal data in connected vehicles and mobility-related applications | 1/2020 | 2020-02-19 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-12020-processing-personal-data-context-connected_en) | — | ## 2019 | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) | 3/2018 | 2019-11-12 | 2.1 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32018-territorial-scope-gdpr-article-3-version_en) | — | | Guidelines 1/2018 on certification and identifying certification criteria (Art. 42 & 43 GDPR) | 1/2018 | 2019-06-04 | 3.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-12018-certification-and-identifying_en) | — | | Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679 | 1/2019 | 2019-06-04 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-12019-codes-conduct-and-monitoring-bodies_en) | — | | Guidelines 2/2019 on processing personal data under Art. 6(1)(b) in context of online services | 2/2019 | 2019-10-16 | 2.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-22019-processing-personal-data-under-article-61b_en) | — | ## 2018 — EDPB adopted & WP29-era guidelines endorsed by EDPB (25 May 2018) | Name | Reference | Date (latest ver.) | Version | Official link | Vault note | |---|---|---|---|---|---| | Guidelines 02/2018 on derogations of Article 49 under Regulation 2016/679 | 02/2018 | 2018-05-25 | 1.0 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-22018-derogations-article-49-under-regulation_en) | [[SiteMap/EDPB Guidelines BackUp/Guidelines 2018-02 on derogations of Article 49 under Regulation 2016-679]] | | Guidelines on automated decision-making and profiling (WP251 rev.01) | WP251/2018 | 2018-05-25 | WP251 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/automated-decision-making-and-profiling_en) | — | | Guidelines on personal data breach notification under Regulation 2016/679 (WP250 rev.01) | WP250/2018 | 2018-05-25 | WP250 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-personal-data-breach-notification-under_en) | — | | Guidelines on Data Protection Impact Assessments – high risk processing (WP248 rev.01) | WP248/2018 | 2018-05-25 | WP248 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/data-protection-impact-assessments-high-risk-processing_en) | — | | Guidelines on transparency under Regulation 2016/679 (WP260) | WP260/2018 | 2018-05-25 | WP260 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/transparency_en) | — | | Guidelines on Data Protection Officers (WP243 rev.01) | WP243/2018 | 2018-05-25 | WP243 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-data-protection-officers-wp243_en) | — | | Guidelines on identifying a controller or processor's lead supervisory authority (WP244 rev.01) | WP244/2018 | 2018-05-25 | WP244 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-identifying-controllers-or-processors-lead_en) | — | | Guidelines on consent under Regulation 2016/679 (WP259 rev.01) | WP259/2018 | 2018-05-25 | WP259 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-consent-under-regulation-2016679_en) | — | | Guidelines on the right to data portability (WP242 rev.01) | WP242/2018 | 2018-05-25 | WP242 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-right-data-portability_en) | — | | Guidelines on the application and setting of administrative fines (WP253) | WP253/2018 | 2018-05-25 | WP253 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-application-and-setting-administrative-fines_en) | — | | Guidelines on Binding Corporate Rules for processors (WP257) | WP257/2018 | 2018-05-25 | WP257 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-binding-corporate-rules-processors_en) | — | | Guidelines on personal data breach notification (WP213 rev.01) | WP213/2018 | 2018-05-25 | WP213 rev.01 | [edpb.europa.eu](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-personal-data-breach-notification_en) | — | --- *Note: The "Vault note" column links to existing notes in this vault. Notes in `Work/Tech Data/Privacy/EDPB Guidelines/` use the format `EDPB Guidelines XX-YYYY …` (with "-" replacing the EDPB's "/" in reference numbers). Notes without a vault link have not yet been imported.*