Directives-Decisions

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)

Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with provision of publicly available electronic communications services or of public communications networks

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)

Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation (EC) No. 2006/2004 (Telecoms Package)

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)

Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation (EC) No. 2006/2004 (Telecoms Package)

Directive 2013/40/EU of the European Parliament and of the Council of August 12, 2013 on attacks against information systems

Standard Contractual Clauses

BCR Overview

Key Documents

Approved BCRs

Adequacy decisions (europa.eu)