Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR

Published by European Data Protection Board English

General Data Protection RegulationGPDRInternational Transfers of Data

Aims at clarifying this interplay between Article 3 and the provisions of the GDPR on international transfers in Chapter V in order to assist controllers and processors in the EU in identifying whether a processing constitutes a transfer to a third country or to an international organisation and, as a result, whether they have to comply with the provisions of Chapter V of the
GDPR.

View this resource Bookmark this resource

Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) – version adopted after public consultation

Published by European Data Protection Board

General Data Protection RegulationGPDR

The territorial scope of General Data Protection Regulation1
(the GDPR or the Regulation) is
determined by Article 3 of the Regulation and represents a significant evolution of the EU data
protection law compared to the framework defined by Directive 95/46/EC2.

View this resource Bookmark this resource

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default

Published by European Data Protection Board

General Data Protection RegulationGPDR

In an increasingly digital world, adherence to Data Protection by Design and by Default requirements
plays a crucial part in promoting privacy and data protection in society. It is therefore essential that
controllers take this responsibility seriously and implement the GDPR obligations when designing
processing operations

View this resource Bookmark this resource

Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies

Published by European Data Protection Board

General Data Protection RegulationGPDR

This document seeks to provide guidance as to the application of Articles 46 (2) (a) and 46 (3) (b) of
the General Data Protection Regulation (GDPR) on transfers of personal data from EEA public
authorities or bodies (hereafter “public bodies”) to public bodies in third countries or to international organisations, to the extent that these are not covered by an adequacy finding adopted by the European Commission.

View this resource Bookmark this resource