2.2 Actions by the Article 29 Working Party / European Data Protection Board

The Article 29 Working Party, which groups all national data protection authorities, including the European Data Protection Supervisor, plays a key role in preparing the application of the Regulation by issuing guidelines for companies and other stakeholders. As enforcers of the Regulation and direct contacts for stakeholders, national data protection authorities are best placed to provide additional legal certainty regarding the interpretation of the Regulation. Guidelines/working documents by the Article 29 Working Party in view of the entry into application of the Regulation 26 Right to data portability Adopted on 4-5 April 2017 Data protection officers Designation of the lead Supervisory Authority Data protection impact assessment Adopted on 3-4 October 2017 Administrative fines Adopted on 3-4 October 2017 Profiling Work ongoing Data breach Work ongoing Consent Work ongoing Transparency Work ongoing Certification and accreditation Work ongoing Adequacy referential Work ongoing Binding corporate rules for controllers Work ongoing Binding corporate rules for processors Work ongoing The Article 29 Working Party is working to update existing opinions, including on the tools for transferring data to non-EU countries. Since it is essential for operators to have a coherent and single set of guidelines, the current guidelines at national level need to be either repealed or brought into line with those adopted by the Article 29 Working Party/European Data Protection Board on the same topic. The Commission attaches great importance to the fact that those guidelines are subject to public consultation before finalisation. It is essential that stakeholders’ input in this process be as precise and concrete as possible as this will help identify best practices and bring industry and sectoral features to the attention of the Article 29 Working Party. The final responsibility for those guidelines remains with the Article 29 Working Party and the future European Data Protection Board, and the data protection authorities will refer to them when enforcing the Regulation. It should be possible to amend the guidelines in the light of developments and practices. To this end, it is essential for data protection authorities to promote a culture of dialogue with all stakeholders, including businesses. It is important to recall that, where questions regarding the interpretation and application of the Regulation arise, it will be for courts at national and EU level to provide the final interpretation of the Regulation.

← sec_d_engaging_with_stakeholders · All articles · 3 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-07