/\ |_  _   _|_
/~~\|_)(_)|_||

Find commonly used GDPR-resources in one central place.

Made by Arad, a compliance lawyer, in the spirit of knowledge-sharing.

Contact me on arad.se/contact. Follow me on LinkedIn: linkedin.com/in/arad.

© Arad Aslrousta, All Rights Reserved.

GDPR Bookmarks

Sweden

Controller

EDPB Guidelines

WP29 Opinion 1/2010
EDPS Guidelines (2019)

DPO

Cookies

PTS, Swedish Guidance
Cookie Banner Taskforce Report

NOYB Consent Banner Report
Irish DPA Guidance (fn 2)
Guidelines 2/2023 on Art. 5(3) of ePrivacy

Guidelines 8/2020 on the targeting of social media users
Opinion 04/2012 on Cookie Consent Exemption
Working Document 02/2013 providing guidance on obtaining consent for cookies

Personal Data

WP29 Opinion 4/2007
WP29 Opinion 05/2014 on Anonymisation Techniques
AEPD-EDPS joint paper on 10 misunderstandings related to anonymisation

Irish DPA, Guidance on Anonymisation and Pseudonymisation
ENISA Recommendations, An overview on data pseudonymisation
ENISA, Pseudonymisation techniques and best practices
ENISA, Advanced Techniques and Use Cases

Legal Basis

Irish DPA Guidance
EDPB, Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects

C‑252/21, Meta v. Bundeskartellamt, p. 98
C‑252/21, Meta v. Bundeskartellamt, p. 138
C‑252/21, Meta v. Bundeskartellamt, p. 136
C-439/19, Latvijas Republikas Saeima (Points de pénalité), p. 108
C‑184/20, Vyriausioji tarnybinės etikos komisija, p. 75
EDPB Guidelines 1/2024 on Article 6(1)(f)

WP29, Opinion 06/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC
C‑252/21, Meta v. Bundeskartellamt, p. 106

Principles

EDPB Guidelines 4/2019 on Article 25
Irish DPA Guidance
British DPA Guidance
WP29 Guidelines on Transparency

Spanish DPA Guidance on addictive patterns in the processing of personal data
C‑60/22, UZ v. Bundesrepublik Deutschland, p. 57-66
WP29 Opinion 03/2013 on purpose limitation
C‑131/12, Google Spain, p. 93
C‑434/16, Nowak, p. 53
C‑77/21, Digi, p. 52
C‑136/17, GC and Others (De-referencing of sensitive data), p. 74
Irish DPA, Guidance for Controllers on Data Security
EDPS, Guidelines on the protection of personal data in IT governance and IT management of EU institutions

WP29 Opinion 3/2010 on the principle of accountability

DPIA

IMY Article 35.4 List
WP29 Guidelines

Irish DPA Guidance

AI

Rights

IMY Brief Guidance
EDPB, Guidelines 5/2019 on the criteria of the Right to be Forgotten
Joined Cases C‑26/22 and C‑64/22, SCHUFA Holding, p. 111
Recital 67
British pre-Brexit ICO Guidance

Breach

EDPB Guidelines 9/2022
EDPB Examples 01/2021

Spanish DPA Guidelines
ENISA, Assessing Severity
Report incident in Sweden

Surveillence

EDPB Guidelines 05/2022 on video devices

Transfers

Article 3 Guidelines
Supplementary Measures
Article 49 Guidelines

Fines

EDPB Guidelines 04/2022
WP29 Guidelines