Resources

First Draft General-Purpose AI Code of Practice by EU Commission

AI

Mobile Applications recommendations for better privacy protection by CNIL (french)

Product Privacy Design

Age-Appropriate Design Toolkit Tracker

Children as data subjects

AI Toolkit Tracker

AI

Personal Data Breach Management and Reporting Toolkit Tracker

Data Breaches

Requests for Access Toolkit Tracker

Access Requests (DSAR)

Data Sharing Toolkit Tracker

Data Sharing

Training and Awareness Toolkit Tracker

Technical and Organisational Measures (TOMs)

Information & Cyber Security Checklist Tracker

Technical and Organisational Measures (TOMs)

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Accountability Toolkit Tracker

Accountability

Recommendations for the use of AI coding assistants by ANSSI and BSI

AI, Specific processing situations

Recommendation on mobile applications or apps by the French DPA

Lawfulness of Processing, Specific processing situations

Recommendation 01/2019 on the draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) |EPDB

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR) |EPDB

Data Transfers

Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data |Version 2.0 |EPDB

Data Transfers

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures |EPDB

Specific processing situations, Surveillance

Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive |EPDB

Adequacy Decisions, Data Transfers

Recommendations 02/2021 on the legal basis for the storage of credit card data for the sole purpose of facilitating further online transactions |EPDB

Consent, Lawfulness of Processing

Privacy Notice Template by the UK ICO

Data Subjects Rights

Recommendation 5: Promote parental controls that respect the child’s privacy and best interests by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 4: Seek parental consent for children under 15 by CNIL

Children as data subjects, Consent, Data Subjects Rights, Lawfulness of Processing

Recommendation 3: Support parents with digital education by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 2: Encourage children to exercise their rights by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 1: Regulate the capacity of children to act online by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 7: Check the age of the child and parental consent while respecting the child’s privacy by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 6: Strengthen the information and rights of children by design by CNIL

Children as data subjects, Data Subjects Rights

UK ICO Privacy Policy Generator

Data Subjects Rights

Conformally Privacy Policy Generator

Data Subjects Rights

CNIL open source PIA software – data protection impact assessment

Data Protection Impact Assessment (DPIA)

Controller – Processor Assessment Tool

Controllers and Processors

Report and Recommendations of the New York State Bar Association Task Force on Artificial Intelligence

AI, Specific processing situations

Transfer Impact Assessment (TIA)

Data Transfers

GDPR Risk Assessment by the AEPD

Data Protection Impact Assessment (DPIA)

Recommendations for companies planning to use Cloud computing services by CNIL

Cloud Services

AI Development Recommendations to Ensure GDPR Compliance by CNIL

AI, Specific processing situations