What is the European Data Protection Board (EDPB)?
EU umbrella body of all national data protection authorities (AP, CNIL, etc). Issues binding guidelines, resolves cross-border disputes, coordinates enforcement.
The European Data Protection Board (EDPB) was established under GDPR Art. 68 as successor to the Article 29 Working Party. It consists of the chairs of all 27 national DPAs (Netherlands: AP) + the European Data Protection Supervisor. What does the EDPB do? (1) Guidelines and recommendations — binding interpretation of GDPR for the entire EU. E.g. WP251 on automated decision-making, 03/2022 on dark patterns, 01/2020 on Schrems II supplementary measures. (2) Cross-border procedures (one-stop-shop) — for cross-border processing (e.g. Meta in Ireland) EDPB coordinates lead DPA + concerned DPAs. (3) Dispute resolution between DPAs (Art. 65) — if DPAs disagree, EDPB takes binding decision. (4) Advice to EC + Council on new legislation. Notable decisions: 2023 Meta Ireland (€1.2 billion fine after EDPB overruling Irish decision), 2024 TikTok children's data, 2025 Booking cross-border cookies. Practical value for you: every AP decision is weighed against EDPB guidelines. In a complaint you can cite EDPB guidelines for extra weight. Not the same as EDPS: EDPS (European Data Protection Supervisor) oversees EU institutions themselves, not national processing.
Sources
🔎 Common search variants
Recognise your own search? Our answer above covers these too.
- “edpb”
- “european data protection board”
- “gdpr article 68”
- “edpb guidelines”