European Union

EU Institutions

Directives-Decisions

Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR)
GDPR Guidelines
Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with provision of publicly available electronic communications services or of public communications networks
Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)
Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation (EC) No. 2006/2004 (Telecoms Package)
Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (ePrivacy Directive)
Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 amending Directive 2002/22/EC, Directive 2002/58/EC, and Regulation No. 2006/2004 (Telecoms Package)
Commission Regulation (EU) No 611/2013 of 24 June 2013 on the measures applicable to the notification of personal data breaches under Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications
Directive 2013/40/EU of the European Parliament and of the Council of August 12, 2013 on attacks against information systems

Replaces Council Framework Decision 2005/22/JHA

The Directive on security of network and information systems (NIS Directive)
EU controller to non-EU or EEA controller & EU controller to non-EU or EEA processor
Working Document on Binding Corporate Rules for Controllers (wp256rev.01)
Working Document on Binding Corporate Rules for Processors (wp257rev.01)
Working Document on Transfers of personal data to third countries: Applying Article 26 (2) of the EU Data Protection Directive to Binding Corporate Rules for International Data Transfers
Working Document - Model Checklist Application for Approval of Binding Corporate Rules
Explanatory Document on the Processor Binding Corporate Rules
Working Document 2/2012 setting up a table with the elements and principles to be found in Processor Binding Corporate Rules
Adequacy Decisions
Department of Commerce Privacy Shield website