View source for EDPB - Endorsement 1/2018

{{DPAdecisionBOX

<!--Information about the DPA-->
 | Jurisdiction = European Union
 | DPA-BG-Color = 
 | DPAlogo = logoEDPB.png
 | DPA_Abbrevation = EDPB
 | DPA_With_Country = EDPB

<!--Information about the decision-->
 | Case_Number_Name = Endorsement 1/2018
| ECLI =  

 | Original_Source_Name_1 = Endorsement 1/2018
 | Original_Source_Link_1 = https://edpb.europa.eu/sites/default/files/files/news/endorsement_of_wp29_documents_en_0.pdf
 | Original_Source_Language_1 = English
 | Original_Source_Language__Code_1 = EN

 | Original_Source_Name_2 = 
 | Original_Source_Link_2 = 
 | Original_Source_Language_2 = 
 | Original_Source_Language_Code_2 = 

 | Type = 
 | Outcome = 
 | Date_Decided = 25.05.2018
 | Date_Published = 
 | Year = 2018
 | Fine = 
 | Currency = 

<!--Information about the applied law-->
 | GDPR_Article_1 = 
 | GDPR_Article_Link_1 = 
 | GDPR_Article_2 = 
 | GDPR_Article_Link_2 = 
 | GDPR_Article_3 = 
 | GDPR_Article_Link_3 = 
 | GDPR_Article_4 = 
 | GDPR_Article_Link_4 = 
 | GDPR_Article_5 = 
 | GDPR_Article_Link_5 = 
 | GDPR_Article_6 = 
 | GDPR_Article_Link_6 = 
 | GDPR_Article_7 = 
 | GDPR_Article_Link_7 = 
 | GDPR_Article_8 = 
 | GDPR_Article_Link_8 = 
 | GDPR_Article_9 = 
 | GDPR_Article_Link_9 = 
 | GDPR_Article_10 = 
 | GDPR_Article_Link_10 = 
 | GDPR_Article_11 = 
 | GDPR_Article_Link_11 = 
 | GDPR_Article_12 = 
 | GDPR_Article_Link_12 = 
 | GDPR_Article_13 = 
 | GDPR_Article_Link_13 = 
 | GDPR_Article_14 = 
 | GDPR_Article_Link_14 = 
 | GDPR_Article_15 = 
 | GDPR_Article_Link_15 = 
 | GDPR_Article_16 = 
 | GDPR_Article_Link_16 = 
 | GDPR_Article_17 = 
 | GDPR_Article_Link_17 = 
 | GDPR_Article_18 = 
 | GDPR_Article_Link_18 = 
 | GDPR_Article_19 = 
 | GDPR_Article_Link_19 = 
 | GDPR_Article_20 = 
 | GDPR_Article_Link_20 = 

 | EU_Law_Name_1 = 
 | EU_Law_Link_1 = 
 | EU_Law_Name_2 = 
 | EU_Law_Link_2 = 
 | EU_Law_Name_3 = 
 | EU_Law_Link_3 = 
 | EU_Law_Name_4 = 
 | EU_Law_Link_4 = 
 | EU_Law_Name_5 = 
 | EU_Law_Link_5 = 
 | EU_Law_Name_6 = 
 | EU_Law_Link_6 = 
 | EU_Law_Name_7 = 
 | EU_Law_Link_7 = 
 | EU_Law_Name_8 = 
 | EU_Law_Link_8 = 
 | EU_Law_Name_9 = 
 | EU_Law_Link_9 = 
 | EU_Law_Name_10 = 
 | EU_Law_Link_10 = 
 | EU_Law_Name_11 = 
 | EU_Law_Link_11 = 
 | EU_Law_Name_12 = 
 | EU_Law_Link_12 = 
 | EU_Law_Name_13 = 
 | EU_Law_Link_13 = 
 | EU_Law_Name_14 = 
 | EU_Law_Link_14 = 
 | EU_Law_Name_15 = 
 | EU_Law_Link_15 = 
 | EU_Law_Name_16 = 
 | EU_Law_Link_16 = 
 | EU_Law_Name_17 = 
 | EU_Law_Link_17 = 
 | EU_Law_Name_18 = 
 | EU_Law_Link_18 = 
 | EU_Law_Name_19 = 
 | EU_Law_Link_19 = 
 | EU_Law_Name_20 = 
 | EU_Law_Link_20 = 

 | National_Law_Name_1 = 
 | National_Law_Link_1 = 
 | National_Law_Name_2 = 
 | National_Law_Link_2 = 
 | National_Law_Name_3 = 
 | National_Law_Link_3 = 
 | National_Law_Name_4 = 
 | National_Law_Link_4 = 
 | National_Law_Name_5 = 
 | National_Law_Link_5 = 
 | National_Law_Name_6 = 
 | National_Law_Link_6 = 
 | National_Law_Name_7 = 
 | National_Law_Link_7 = 
 | National_Law_Name_8 = 
 | National_Law_Link_8 = 
 | National_Law_Name_9 = 
 | National_Law_Link_9 = 
 | National_Law_Name_10 = 
 | National_Law_Link_10 = 
 | National_Law_Name_11 = 
 | National_Law_Link_11 = 
 | National_Law_Name_12 = 
 | National_Law_Link_12 = 
 | National_Law_Name_13 = 
 | National_Law_Link_13 = 
 | National_Law_Name_14 = 
 | National_Law_Link_14 = 
 | National_Law_Name_15 = 
 | National_Law_Link_15 = 
 | National_Law_Name_16 = 
 | National_Law_Link_16 = 
 | National_Law_Name_17 = 
 | National_Law_Link_17 = 
 | National_Law_Name_18 = 
 | National_Law_Link_18 = 
 | National_Law_Name_19 = 
 | National_Law_Link_19 = 
 | National_Law_Name_20 = 
 | National_Law_Link_20 = 

 | Party_Name_1 = 
 | Party_Link_1 = 
 | Party_Name_2 = 
 | Party_Link_2 = 
 | Party_Name_3 = 
 | Party_Link_3 = 
 | Party_Name_4 = 
 | Party_Link_4 = 
 | Party_Name_5 = 
 | Party_Link_5 = 

<!--Information about a possible appeal-->
 | Appeal_To_Body = 
 | Appeal_To_Case_Number_Name = 
 | Appeal_To_Status = 
 | Appeal_To_Link = 
 | Initial_Contributor =
 | 
}}

<blockquote>
THE EUROPEAN DATA PROTECTION BOARD

Whereas:

(1)  The  European  Data  Protection  Board  (EDPB)  is  an  independent  body  with  legal  personality, responsible for ensuring the consistent application of the General Data Protection Regulation (GDPR). 

(2) The EDPB succeeds the Article 29 Working party set up under Article 29 of Directive 95/46/EC. It is 
composed of the Member States data protection authorities and the EDPS. 

(3) The GDPR enters into application today, 25 May 2018, while the Directive 95/46/EC is repealed 
with effect from today.

(4)  The  Article 29 Working Party has committed itself and  adopted in the last two years  guidelines and other documents on various aspects of the GDPR, contributing thus to the consistent application of the GDPR. The Article 29 Working Party has consulted interested parties, where appropriate.

Acknowledges  the  continuity  of  the  work  provided  by  the  predecessor  Article  29  Working  Party. Without  prejudice  to  any  future  revision  as  appropriate,  it  endorses  the  Article  29  Working Party 
documents as following:

1. Guidelines on consent under Regulation 2016/679, WP259 rev.01

2. Guidelines on transparency under Regulation 2016/679, WP260 rev.01

3. Automated individual decision-making and profiling Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679, WP251rev.01

4.  Personal data breach notification Guidelines on Personal data breach notification under Regulation 2016/679, WP 250 rev.01

5. The right to data portability Guidelines on the right to data portability under Regulation 2016/679, WP 242 rev.01

6. Data protection impact assessment Guidelines on Data Protection Impact Assessment (DPIA) and determining  whether  processing  is  "likely  to  result  in  a  high  risk"  for  the  purposes  of  Regulation 2016/679, WP248 rev.01

7. Data protection officers Guidelines on Data Protection Officers ('DPO'), WP243 rev.01 

8.  Lead  supervisory  authority  Guidelines  for  identifying  a  controller  or  processor's  lead  supervisory authority, WP244 rev.01

9. Position Paper on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR]

10. Working Document Setting Forth a Co-Operation Procedure for the approval of “Binding Corporate Rules” for controllers and processors under the GDPR, WP 263 rev.01

11. Recommendation on the Standard Application for Approval of Controller Binding Corporate Rules for the Transfer of Personal Data, WP 264

12. Recommendation on the Standard Application form for Approval of Processor Binding Corporate Rules for the Transfer of Personal Data, WP 265

13.  Working  Document  setting  up  a  table  with  the  elements  and  principles  to  be  found  in  Binding Corporate Rules, WP 256 rev.01

14. Working Document setting up a table with the elements and principles to be found in Processor Binding Corporate Rules, WP 257 rev.01

15. Adequacy Referential, WP 254 rev.01

16. Guidelines on the application and setting of administrative fines for the purposes of the Regulation 2016/679, WP 253

Brussels, 25 May 2018

For the European Data Protection Board

Andrea Jelinek

Chair
</blockquote>

{{Template:EDPB-Copyright}}