Resources

OPINION OF ADVOCATE GENERAL SPIELMANN ON Case C‑413/23 P

Pseudonymisation, Technical and Organisational Measures (TOMs)

FDPIC guideline cookies

Consent, Cookies, Lawfulness of Processing

EDPB Guidelines 1/2025 on Pseudonymisation

Pseudonymisation, Technical and Organisational Measures (TOMs)

DSB (Austria) – D130.1013 2024-0.743.431 nyob vs Google

Data Controller, Data Subjects Rights, Definitions

OH Digitale Dienste version 1.2 by German data protection authority

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Guidelines on submission of signals under the Whistleblowing directive by the Bulgarian CPDP

Whistleblowing

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Case C‑461/22 CURIA

Data Controller, Definitions

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Good FOI practice – a panel discussion by the UK ICO

Freedom of expression and information

DIRECTIVE (EU) 2019/1937 on the protection of persons who report breaches of Union law (Whistleblower Directive)

Whistleblowing

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Data Protection and Journalism | UK ICO

Freedom of expression and information

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications

Connected Vihicles

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies