Back issues
Every resource we have surfaced so far, listed by issue, most recent first. Each one has a short summary page and a link to the original — we point to the source and never host or give away the material itself. 18 resources across 6 issues, and we hope you find something useful here.
Issue 6 —
Security measures under Art. 32.
- CNIL Practice Guide — Security of Personal Data
Commission nationale de l’informatique et des libertés (France) · Practice guide — 2024 edition; French PDF updated 2026
Issue 5 —
Agentic AI and where responsibility sits.
- Agentic Artificial Intelligence from the Perspective of Data Protection
Agencia Española de Protección de Datos (Spain) · Guidance — final
Issue 4 —
DPIA — method, templates and risk management.
- Template for a Data Protection Impact Assessment (and its Explainer)
European Data Protection Board · Draft — consultation closed, not finalised - Risk Management and Impact Assessment in the Processing of Personal Data
Agencia Española de Protección de Datos (Spain) · Guidance — final - The PIA Guides and the Open-Source PIA Software
Commission Nationale de l'Informatique et des Libertés (France) · Guidance + open-source tool - DPIA Templates — including a Template for AI Solutions
Datatilsynet (Denmark) · Templates — final · Danish only
Issue 3 —
Cookies, trackers and website auditing.
- EDPB Website Auditing Tool
European Data Protection Board · Open-source tool - Website Evidence Collector (WEC) & WEC Online
European Data Protection Supervisor · Open-source tool - Guidelines 2/2023 on the Technical Scope of Art. 5(3) ePrivacy Directive
European Data Protection Board · Guidelines — adopted - ICO Guidance on the Use of Storage and Access Technologies
Information Commissioner's Office (UK) · Guidance — final
Issue 2 —
Method, maturity, benchmarking — and a training curriculum.
- The Standard Data Protection Model (SDM)
Datenschutzkonferenz (Germany) · Methodology / framework - Privacy Maturity Assessment Framework (PMAF)
Government Chief Privacy Officer (New Zealand) · Maturity model - GDPR Enforcement Tracker
CMS (law firm) · Reference database - Law & Compliance in AI Security & Data Protection (EDPB SPE)
EDPB Support Pool of Experts · Expert training
Issue 1 —
The launch issue.
- Software Development with Data Protection by Design and by Default
Datatilsynet (Norway) · Practical guidance - Guidelines 01/2025 on Pseudonymisation
EDPB · Guidelines (draft) - Building Accountable AI Programs: Mapping Emerging Best Practices to the CIPL Accountability Framework
CIPL · White paper - Cost of a Data Breach Report 2025
IBM / Ponemon · Annual report
