WP29

WP29, officially the Article 29 Working Party, is a European advisory body formed by representatives of the data protection authorities of EU member states and the European Commission. It was established under the Data Protection Directive 95/46/EC to promote the uniform application of data protection laws across the EU.

Its main functions included issuing opinions, guidelines, and best practices on data protection and privacy, interpreting EU rules, and advising policymakers and organizations on compliance. It produced guidance on topics such as consent, data subject rights, data breach notification, data transfers to third countries, profiling, privacy by design, and the use of new technologies.

With the entry into force of the General Data Protection Regulation (GDPR) in 2018, the Article 29 Working Party's remit was transferred to the European Data Protection Board (EDPB), established by the GDPR. Since then, the EDPB assumes responsibility for issuing guidelines, opinions, and recommendations to harmonize data protection across the EU. The WP29 name is still used in historical references and in some guidance literature.

Structure and influence: The WP29 consisted of representatives from each EU member state's data protection authority and the European Commission, operating by consensus. It produced non-binding guidelines that national authorities often applied in parallel to national law. After the transition to the EDPB, the new body has continued to provide guidance and foster cross-border supervisory cooperation in data protection matters.