Issue opinions on processing operations - Advise parliament, government, and other institutions on data protection matters - Approve codes of conduct and certification mechanisms