GDPR guidance and decisions
Find guidance, opinions and decisions from the EDPB. Check each document’s status and scope before relying on it.
Take into practice
Which processing activity and territorial scope are you assessing?
Privacy crosses borders.
Your research should too.
Official sources. Local context. Better questions. Explore privacy and AI resources, select the ones relevant to your work and take a research brief into the next conversation.
7 source pathways6 regionsReviewed October 6, 2026
Find your starting point.
7 resources shown · curated starting points, not a complete legal inventory
AI and data protection
Guidance on data protection questions raised by AI. The ICO flags review following the Data (Use and Access) Act; check current text and commencement information.
Take into practice
What personal data enters the system, and how will you assess its effects on people?
Personal data in AI recommendation and decision systems
An official starting point for researching personal data use in AI recommendation and decision systems in Singapore.
Take into practice
What is the system recommending or deciding, and what personal data supports it?
International transfer mechanisms under the LGPD
ANPD explains mechanisms under Resolution 19/2024, including contractual clauses and adequacy decisions. Confirm the applicable mechanism and current decisions.
Take into practice
Who exports and receives the data, and which transfer mechanism supports the actual flow?
Prior authorisation under POPIA
Guidance for responsible parties processing information subject to prior authorisation under POPIA. Read the linked guidance for conditions and procedure.
Take into practice
Does the planned activity fall within a category requiring prior authorisation?
Privacy Officer Toolkit
Practical resources for privacy officers in Australian Government agencies. Its agency context matters; do not assume every requirement applies to private organisations.
Take into practice
Who owns privacy review, and when does that review enter the project lifecycle?
Generative AI risk management profile
A generative AI companion to the NIST AI Risk Management Framework. A risk framework is not a determination of legal compliance.
Take into practice
What evidence will show that your risk controls work in the intended use?
THE PEOPLE BEHIND THE WORK
Your region belongs in the conversation.
This desk is a starting collection. It does not yet cover every jurisdiction or language. Help strengthen it with an official source, a practical question or a perspective from your work.
Contribute a perspective