Print

Regulation 2018/1725

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions and bodies when they process personal data and develop new policies.

The Regulation repeals Regulation (EC) 45/2001, and, in line with GDPR, adopts a principle-based approach.

The new legal instrument ensures that EU institutions and bodies provide transparent and easily accessible information on how personal data is used, as well as foresee clear mechanisms for individuals to exercise their rights; it also reconfirms, clarifies and enhances the role of data protection officers within each EU institution and of the EDPS.

Filters

7
Nov
2019
Guidelines

Concepts of controller, processor and joint controllership under Regulation (EU) 2018/1725

When processing personal data, EU institutions and bodies (EUIs) must comply with specific data protection rules. Depending on their role, their obligations differ. The following guidelines provide explanation and practical advice to EU institutions and bodies on how to comply with Regulation (EU) 2018/1725 (‘the Regulation’).

Available languages: German, English, French
Topics
Regulation 2018/1725
27
Sep
2019
Factsheets

Checklists and flowcharts on data protection

Administrative fines and sanctions under Regulation EU 2018/1725
Available languages: English
Checklist 1: What are the duties of the controller?
Available languages: English
Checklist 2: What are the duties of the processor?
Available languages: English
Checklist 3: What is required in a processing agreement?
Available languages: English
Flowchart: data transfers in the context of Brexit
Available languages: English
Flowchart: Are you a processor, controller, or joint controller?
Available languages: English
Powers of the EDPS under Regulation (EU) 2018/1725
Available languages: English
Useful points and questions on data protection
Available languages: English
Topics
Regulation 2018/1725