1 Annex 1: National Reports on the CEF Right to erasure 2 BG SA ........................................................................................................................................

Report on stakeholder event on anonymisation and pseudonymisation of 12 December 2025 1. Background The EDPB organised a remote stakeholder event on 12 December 2025 to collect stakeholders’ input on

EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body e

EDPB-EDPS JOINT OPINION 2/2026 On the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus) Adopted on 10 February 2026 2 Table of Contents 1 B

EU-U.S. Data Privacy Framework F.A.Q. for European businesses1 Version 2.0 Adopted on 15 January 2026 1 In this context, “European businesses” refers to businesses in the EEA, which transfer or may tr

Adopted - for public consultation 1 Recommendations 1/2026 on the Application for Approval and on the elements and principles to be found in Processor Binding Corporate Rules (Art. 47 GDPR) Adopted on

EU-U.S. Data Privacy Framework F.A.Q. for European individuals1 Version 2.0 Adopted on 15 January 2026 1 In this context, “European individuals” means any natural person, regardless of their nationali

Rules of Procedure for the “Informal Panel of EU DPAs” according to the EU-U.S. Data Privacy Framework Version 2.0 Adopted on 15 January 2026 1 | Adopted Version history Version Date Adoption informat

EDPB-EDPS JOINT OPINION 1/2026 On the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) Adopted on 20

Adopted Opinion 34/2025 on the draft decision of the Greek Supervisory Authority regarding C.E.C.L certification criteria Adopted on 02 December 2025 1 | Adopted Table of Contents 1 Summary of facts .

Opinion 29/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | Table of Contents 1 Summ

Opinion 30/2025 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Illumina Group Adopted on 02 December 2025 1 | Table of Contents 1 Summa

Opinion 31/2025 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Arcadis Group Adopted on 02 December 2025 1 | Table of Contents 1 Summa

Opinion 32/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | Table of Contents 1 Summary o

Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group Adopted on 02 December 2025 1 | Table of Contents 1 Summary of

Recommendations 2/2025 on the legal basis for requiring the creation of user accounts on e-commerce websites Version 1.0 Adopted on 03 December 2025 1 | Adopted - version for public consultation Execu

ADOPTED Opinion 28/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by Brazil Version 1.0 Adopted on

Adopted 1 Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Adopted 16

Adopted 1 Opinion 26/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the United Kingdom Adopted 1

Opinion 25/2025 on the decision of the Polish Supervisory Authority regarding the Processor Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | Table of Contents 1 Summary of the f

Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group Adopted on 07 October 2025 1 | Table of Contents 1 Summary

Opinion 24/2025 on the decision of the Polish Supervisory Authority regarding the Controller Binding Corporate Rules of the BOX Group Adopted on 07 October 2025 1 | Table of Contents 1 Summary of the

Adopted Opinion 17/2025 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Shopify Group Adopted on 11 September 2025 2 Adopted TABLE OF C

Adopted Opinion 21/2025 on the draft decision of the Norwegian Supervisory Authority regarding the Controller Binding Corporate Rules of the Mowi Group Adopted on 11 September 2025 2 Adopted TABLE OF

Adopted Opinion 20/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Processor Binding Corporate Rules of the Northern Trust Group Adopted on 11 September 2025 2 Adopted

Adopted Opinion 18/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Shopify Group Adopted on 11 September 2025 2 Adopted Table of co

Adopted Opinion 19/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Northern Trust Group Adopted on 11 September 2025 2 Adopte

Adopted Opinion 22/2025 on the draft decision of the Luxembourg Supervisory Authority regarding the Controller Binding Corporate Rules of the Ferrero Group Adopted on 11 September 2025 2 Adopted TABLE

Adopted - version for public consultation Guidelines 3/2025 on the interplay between the DSA and the GDPR Version 1.1 Adopted on 11 September 2025 Adopted - version for public consultation Version his