1.3. The European Data Protection Supervisor (EDPS

binding, but are highly influential. While the EBPB does not provide individual consultancy services, the general guidance provided by this body can be useful for SMEs.24 For example, the EDPB adopted guidelines on the concepts of controller and processor, on the use of consent, and on the application of data protection by design and by default principles. Some guidance focuses on specific activities, such as the processing of personal data through video devices or targeting social media users.25

1.3. The European Data Protection

Supervisor (EDPS)

The European Data Protection Supervisor (EDPS) acts as the DPA for EU institutions, bodies, offices and agencies.26 Similarly to the EDPB, the EDPS issues (non-legally-binding) opinions and general guidance upon various aspects of European data protection law. While such guidance is addressed to European institutions, bodies, offices and agencies (e.g. the European Commission or Europol), it provides practical advice that can be adapted accordingly to the reality and needs of SMEs. For example, the EDPS has issued guidelines on the use of cloud computing services and guidelines, on personal data and electronic communications in the EU institutions (eCommunications guidelines), and on security measures for personal data processing.27

24 EDPB, ‘About EDPB’ https://edpb.europa.eu/about-edpb/about-edpb_en. 25 EDPB, ‘GDPR: Guidelines, Recommendations, Best Practices’ https://edpb.europa.eu/our-work-tools/general-guidance/ gdpr-guidelines-recommendations-best-practices_en. 26 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC. OJ L 295, 21.11.2018, 39–98 https://eur-lex.europa. eu/eli/reg/2018/1725/oj. 27 An overview of EDPS guidance https://edps.europa.eu/data-protection/our-work/ our-work-by-type/guidelines_en.