Skip to main content
Privacy Track
Category: Supervisory Authorities & Enforcement

Consistency Opinion

Also known as: Article 64 Opinion, EDPB Opinion, Board Opinion
Simply put

A Consistency Opinion is a formal view issued by the European Data Protection Board (EDPB) to help ensure that data protection rules are applied in a similar way across the EU. It is part of a cooperation process designed to prevent national regulators from reaching conflicting decisions on the same types of issues. Note: the evidence packet provided does not contain sources describing this GDPR concept, so the details below should be verified against the current official text of the GDPR and EDPB materials.

Formal definition

A Consistency Opinion is understood in practice to be an opinion adopted by the European Data Protection Board under the GDPR's consistency mechanism, through which the Board provides its view on matters producing effects in more than one Member State or where consistent application is otherwise engaged. Such opinions are generally associated with the consistency and cooperation provisions of the GDPR (commonly cited around Articles 63-65, with a related dispute-resolution power for binding decisions), and supervisory authorities are typically expected to take the utmost account of the Board's opinion, subject to the specific procedural requirements of the Regulation. IMPORTANT LIMITATION: The evidence packet supplied for this entry contains only general-language and non-legal sources (dictionary and blog material on 'consistency') and no authoritative GDPR or EDPB source; the specific article numbers, the precise 'utmost account' obligation, and the procedural mechanics cannot be reliably confirmed from the provided evidence and must be verified against the current official GDPR text and EDPB guidance before citation in a compliance program.

Why it matters

Consistency Opinions are a core mechanism for preventing regulatory fragmentation across the EU. Because the GDPR is applied by many national supervisory authorities, there is an inherent risk that similar processing activities could be treated differently depending on the Member State. The consistency mechanism, and the opinions issued through it, are designed to reduce that risk by giving supervisory authorities a shared reference point for how the Regulation should be applied to matters with cross-border effect. For organisations operating in multiple Member States, this generally translates into greater predictability about how regulators are expected to approach recurring issues.

Who it's relevant to

Data Protection Officers and compliance leads
DPOs and compliance teams typically monitor EDPB opinions to understand how regulators are likely to interpret and apply the GDPR to recurring issues, and to align internal programs accordingly. The precise weight and procedural effect of any given opinion should be confirmed against the current GDPR text and EDPB materials.
Supervisory authorities
National regulators participate in the consistency mechanism and are generally expected to take account of the Board's opinions when handling matters with cross-border relevance. The exact obligations and procedures should be verified against the controlling provisions of the Regulation.
Privacy lawyers advising on cross-border processing
Lawyers advising organisations with operations in multiple Member States often reference EDPB opinions to assess regulatory expectations and reduce the risk of divergent treatment. Given that regulator positions and guidance can evolve, any reliance should be checked against the latest official sources.

Inside Consistency Opinion

Consistency Mechanism Basis
The Consistency Opinion is an instrument of the consistency mechanism established under Articles 63 to 65 GDPR, designed to ensure that supervisory authorities apply the Regulation consistently across the EU. The opinion itself is provided for under Article 64 GDPR.
Issuing Body
The opinion is issued by the European Data Protection Board (EDPB), the body composed of the heads of the national supervisory authorities and the European Data Protection Supervisor. It is the EDPB, not an individual supervisory authority, that adopts the opinion.
Triggering Circumstances
Under Article 64(1) GDPR, an opinion is generally required where a competent supervisory authority intends to adopt certain measures, such as a draft decision approving a code of conduct, certification criteria, binding corporate rules, or standard contractual clauses, or a data protection impact assessment list. Under Article 64(2), the EDPB may also issue an opinion on a matter of general application or producing effects in more than one member state, on request from a supervisory authority, the Chair, or the Commission.
Legal Effect and 'Utmost Account'
The opinion is not a directly binding decision in the manner of an Article 65 binding decision. However, under Article 64(7) GDPR, the supervisory authority concerned is required to take utmost account of the EDPB's opinion. Where it does not intend to follow the opinion, a further procedure can lead to a binding decision under Article 65.
Relationship to Binding Decisions
A Consistency Opinion under Article 64 should be distinguished from a binding decision under Article 65 GDPR, which resolves disputes between supervisory authorities and is binding on them. The opinion is an earlier, advisory-style step in the consistency mechanism, though it carries the utmost account obligation.

Common questions

Answers to the questions practitioners most commonly ask about Consistency Opinion.

Is a Consistency Opinion just an informal EDPB comment with no basis in the GDPR?
No. The Consistency Opinion is grounded in the consistency mechanism established under Chapter VII of the GDPR (generally Articles 63 to 65), with the opinion function set out in Article 64. It is a formal instrument of the European Data Protection Board (EDPB), not an informal or ad hoc comment. The EDPB publishes such opinions, and they carry procedural weight because the addressed supervisory authority must, under Article 64(7), take utmost account of the opinion. Readers should verify the specific article references and the current EDPB procedural rules against the official text and EDPB guidance, as procedural detail can be refined over time.
Does a Consistency Opinion legally bind the supervisory authority that requested or is addressed by it?
Not in the sense of a binding decision. An Article 64 opinion is distinct from a binding decision issued under the dispute resolution procedure in Article 65. Under Article 64(7), the competent supervisory authority must take utmost account of the opinion, and where it does not intend to follow it, a further procedure can be triggered that may lead to a binding Article 65 decision. So the opinion is influential and procedurally significant rather than automatically binding on its own. The precise interplay between Articles 64 and 65 should be checked against the current Regulation text and EDPB rules of procedure.
When should a supervisory authority seek a Consistency Opinion from the EDPB?
The consistency mechanism is generally engaged where a matter has cross-border implications or where consistent application of the GDPR across the EU is at stake. Article 64 identifies categories of measures for which an EDPB opinion is typically sought, and it also allows opinions on matters of general application. A supervisory authority, or in some cases the Chair or the Commission, may bring a matter to the Board. Because the categories and thresholds are set out in the Regulation and elaborated in EDPB procedures, teams should confirm the applicable trigger against the current official text before assuming an opinion is required.
How should a controller or processor use a published Consistency Opinion in its compliance program?
A published EDPB opinion is a useful interpretive source that indicates how the Board expects the GDPR to be applied consistently across member states, and it can inform risk assessments, DPIA reasoning, and policy positions. It should generally be treated as authoritative guidance rather than as a substitute for the Regulation text, national implementing law, or binding decisions. Because member state derogations and evolving guidance can affect the position, organizations should cite the opinion alongside the relevant articles and monitor for updates or subsequent decisions.
What is the practical difference between relying on a Consistency Opinion and relying on an Article 65 binding decision?
An Article 64 opinion expresses the EDPB's view and obliges the addressed authority to take utmost account of it, whereas an Article 65 binding decision resolves a dispute and is binding on the supervisory authorities concerned. For implementation purposes, a binding decision typically carries greater certainty about the outcome in a specific matter, while an opinion signals expected interpretation more broadly. Compliance teams should identify which instrument they are looking at, since the legal effect and the appropriate reliance differ. Confirm the classification of any document against its own text and the referenced articles.
How can a team stay current given that opinions and related guidance evolve over time?
Consistency opinions are published by the EDPB on an ongoing basis, and interpretive positions can be refined, supplemented, or followed by binding decisions. As a practical matter, organizations typically monitor the EDPB's published opinions and findings, track any national supervisory authority responses, and record in their documentation the version and date of the opinion relied upon. Because the position can change, it is advisable to treat any single opinion as a point-in-time source and to verify it against the latest official EDPB and Regulation materials before acting on it.

Common misconceptions

A Consistency Opinion is legally binding on the supervisory authority in the same way as an Article 65 decision.
Under Article 64(7) GDPR the supervisory authority must take utmost account of the opinion, but the opinion is not itself a binding decision. A binding outcome generally arises only through the separate Article 65 dispute-resolution mechanism where the authority does not follow the opinion.
A Consistency Opinion is issued by an individual national supervisory authority.
The opinion is adopted by the European Data Protection Board as a collective body under Article 64 GDPR, not by a single national authority, even though a national authority's draft measure often triggers the process.
Consistency Opinions are only issued when a supervisory authority proposes a measure.
While Article 64(1) lists specific mandatory triggers tied to authority measures, Article 64(2) also allows the EDPB to issue an opinion on matters of general application or with cross-border effects, upon request from a supervisory authority, the Chair, or the Commission.

Best practices

When a proposed measure falls within the Article 64(1) categories (such as codes of conduct, certification criteria, BCRs, SCCs, or DPIA lists), confirm whether the consistency mechanism is triggered and factor the EDPB opinion timeline into project planning.
Treat the 'utmost account' obligation under Article 64(7) as a substantive requirement: document how a supervisory authority's opinion has been considered and reflected, rather than assuming it can be disregarded.
Distinguish clearly in internal analysis between an Article 64 Consistency Opinion and an Article 65 binding decision, since their legal effect and procedural consequences differ.
Consult the EDPB's published opinions when preparing instruments like BCRs or certification criteria, as they indicate how the Board is likely to interpret consistency issues, while verifying the current text of each opinion against the official EDPB source.
Anticipate that failure to follow an opinion may escalate the matter into the Article 65 dispute-resolution procedure, and plan for the possibility of a subsequent binding decision.
Verify the precise procedural triggers, timeframes, and any evolving EDPB guidance against the current official GDPR text and EDPB publications, as practice and interpretation continue to develop.