European Data Protection Board

The European Data Protection Board (EDPB) is an independent European body, which contributes to the consistent application of data protection rules throughout the European Union, and promotes cooperation between the EU’s data protection authorities. 

The EDPB is composed of representatives of the national data protection authorities, and the European Data Protection Supervisor (EDPS). The supervisory authorities of the EFTA EEA States are also members with regard to the GDPR related matters and without the right to vote and being elected as chair or deputy chairs. The EDPB is established by the General Data Protection Regulation (GDPR), and is based in Brussels. The European Commission and -with regard to the GDPR related matters- the EFTA Surveillance Authority have the right to participate in the activities and meetings of the Board without voting right.

The EDPB aims to ensure the consistent application in the European Union of the General Data Protection Regulation and of the European Law Enforcement Directive.

The EDPB can adopt general guidance to clarify the terms of European data protection laws, giving our stakeholders a consistent interpretation of their rights and obligations.

The EDPB is also empowered by the GDPR to make binding decisions towards national supervisory authorities to ensure a consistent application.

On 25 May 2018, the EDPB has endorsed the guidance provided on the GDPR previously provided by the Article 29 Working Party. The EDPB is also developing additional guidance.