Do you have a question for the EDPB? Please fill out the form below to help us answer your questions.
Please note that the EDPB can only respond to requests that fall within its competences. For questions outside of the scope of the EDPB, we will try to refer you to the relevant service, where possible.
Unfortunately, the EDPB has no competence to handle specific individual requests, nor to provide individual consultancy services.
We advise you to address the supervisory authority in your Member State by selecting your country above and using the contact details provided.
However, please bear in mind that national supervisory authorities receive a large number of requests on a daily basis and are therefore not always able to reply to your request in a short time.
Thank you for understanding.
Unfortunately, the EDPB is not competent to take action in such matters as it cannot take action on behalf of citizens against the national supervisory authorities, which remain fully independent.
Should you not be satisfied with how a supervisory authority has handled your complaint, please note that it is within your rights to take legal action against a supervisory authority before the national courts of the country where the supervisory authority is established (art. 78 GDPR). However, please bear in mind that national supervisory authorities receive a large number of requests on a daily basis and are therefore not always able to reply to your request in a short time.
If taking individual action is not an option for you, you are entitled to seek assistance from a non-governmental organisation active in the field of data protection which may exercise your rights of redress on your behalf.
Please note that in many EU countries there is also the possibility for citizens to raise this kind of issues with the national ombudsman.
Citizens with questions related to data protection law are advised to consult the Supervisory Authority in the country where they are based.
The GDPR introduces the new cross-functional principle of accountability. This means that each organisation must analyze its own situation and implement the organizational and technical measures necessary in its specific case. This is a case by case analysis, depending on the risk presented by the processing of personal data by the organisation.
Instead of answering specific, individual requests, the EDPB issues general guidance. All adopted guidance can be consulted here:https://edpb.europa.eu/our-work-tools/general-guidance/gdpr-guidelines-recommendations-best-practices_en
Scam letter received...
Looking for a job at the EDPB?
Please check ourCareer opportunities page where you can find more information on the recruitment of officials, contract agents, national experts, interim staff or traineeships.
Recruitment selections for the EDPB secretariat are organised by the EDPS. If you are interested in working for the EDPB, please check the EDPS site for vacancies:https://edps.europa.eu/about-edps/recruitment_en
Do not hesitate to make a spontaneous application where you can underline your interest working for the EDPB:recruitment@edps.europa.eu
Request for information...
DPO Certification...
Any processing of personal data conducted by the EDPB and/or its Secretariat is done in compliance withRegulation (EU) 2018/1725, the legal act applicable to the processing of personal data by EU institutions, bodies and offices. The EDPB is not a supervisory authority and it does not process any personal data unrelated to its activities and objectives (you can find more about the EDPB’s mission on its website). The EDPB does not have investigative, corrective or sanctioning powers. It does not have a centralised access to personal data processing operations or to any databases of private or public organisations holding personal data. Therefore, if you have a request or a complaint regarding the processing of your personal data by any other organisation, be it public or private, unrelated to the EDPB and/or its Secretariat, please contact said organisation directly. In alternative, you can always contact the data protection authority of your country/lander of residence (for European Economic Area residents). You can find the list of supervisory authoritieshere.
The relevant Specific Privacy Statement (SPS) is availablehere.
Thank you for your interest in data protection and for taking part in a public consultation.
All comments submitted are screened and reviewed manually by a case officer before being displayed on our website.
There should have been a visual confirmation after submitting your comments on our website. Due to the high demand of emails, we cannot check individual requests for confirmation of receipt. Please allow for some time before your comments are published.
All static content, as well as press releases and documents officially adopted by the Board, such as Guidelines, is made available in all EU official languages. You can change the language settings at the top left corner of the webpage.
We are continuously updating all language versions of our website. Please understand that some time might lapse between the availability of a document in English and its availability in another language.
Organisations with questions related to data protection law are advised to consult the Supervisory Authority in the country where they are based.
The competence for complaints is split among different data protection supervisory authorities in Austria.Competent authorities can be identified according to the following list:
The competence for complaints is split among different data protection supervisory authorities in Belgium.Competent authorities can be identified according to the list provided here:https://www.autoriteprotectiondonnees.be/citoyen/l-autorite/autres-autoriteshttps://www.gegevensbeschermingsautoriteit.be/burger/de-autoriteit/andere-autoriteiten
Deputy for the federal states of Germany: Prof. Dr. Thomas Petri, Bavarian Data Protection Commissioner Postfach 22 12 1980502 MünchenEmail:laendervertreter@datenschutz-bayern.de
The competence for complaints is split among different data protection supervisory authorities in Germany.Competent authorities can be identified according to the list provided underwww.bfdi.bund.de/anschriften.
EU data subjects can contact one of the EEA data protection authorities (DPA), in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.
You can the full list of EEA DPAs here:https://edpb.europa.eu/about-edpb/board/members_en Please note that the EDPB can only refer you to DPAs in the European Economic Area.
Depending on the content of your message, either of the following Specific Privacy Statements (SPSs) may apply:
Please use this contact form only if your messages is about a question related to the content of the EDPB’s website.
Please use this contact form only if your messages is about a technical question related to the EDPB’s website.
Please use this contact form only if your messages is about a scam letter you received, pretending to be from the EDPB.
Please use this contact form only if your messages is about a requests for access to documents under Regulation 1049/2001.
Please use this contact form only if your messages is about a request for the EDPB DPO about any processing of personal data conducted by the EDPB and/or its Secretariat.
Please use this contact form only if your messages is about an invitation or a speaking engagement.
If you contact us (also) about other subjects, we refer you to our ‘most frequently asked questions’ page.
You may use this contact form to contact us about a topic not already addressed on our ‘Contact us’ page or ourFAQ page.
We also refer you to our ‘most frequently asked questions’ page. On this page, you will find the answer to the vast majority of requests sent to us. We will respond further only if your request isnot already addressed on that page.
Please complete the form with more details about your request: