Accountability on the ground: Provisional guidance on documenting processing operations for EU institutions, bodies and agencies (EUIs). These documents provide provisional guidance for controllers and DPO in the EUIs on how to generate records for their processing operations, how to decide whether they need to carry out data protection impact assessments (DPIAs), how to do DPIAs and when to do prior consultations to the EDPS. As the text of the 'new Regulation 45' on data protection in the EU institutions  is not formally adopted yet, this guidance is provisional and will be updated once a final text will be published in the Official Journal.  Nonetheless, it can already be helpful for the EUIs to prepare for their new obligations (Articles 31, 39 and 40 of the 'new Regulation 45').

This text was updated in July 2018 to adapt it to the politically agreed text for the 'new Regulation 45' (Council Document 9296/18), add a few clarifications, as well as to correct a number of errors.

EDPS Opinion on the proposal for a Regulation on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC

/file/factsheet5png-0_enfactsheet_5.png

Inspections are one of the tools used by the EDPS to ensure that the EU institutions and bodies comply with the rules set out in Regulation (EC) No. 45/2001. EDPS Factsheet 5 provides information on what to expect if the EDPS carries out an inspection at your institution.

General Report on "Measuring compliance with Regulation (EC) 45/2001 in EU institutions ("Survey 2015")

Keynote address of Giovanni Buttarelli given at the Banking and Payments Federation, Ireland