11 January 2021
… not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative … DPA reminds that pursuant to Article 33 (1) and (3) of the GDPR, in the case of a personal data breach, the controller … not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative …
10 July 2020
… it and does not fulfil the obligation – provided for in the GDPR – to provide it with access to personal data and other … of the personal data protection system specified by the GDPR), the intentional nature of the breach and the … it and does not fulfil the obligation – provided for in the GDPR – to provide it with access to personal data and other …
28 November 2024
… 330 000 € for infringement of Article 5, 24 and 32 of the GDPR and has ordered the controller to bring processing … operations into compliance with the provisions of GDPR). For further information: Decision in national … 330 000 € for infringement of Article 5, 24 and 32 of the GDPR and has ordered the controller to bring processing …
13 August 2019
… of an Administrative Arrangement pursuant to Article 46.3.b GDPR 67KB Изтегляне Opinion / Binding decision References …
23 November 2023
… 742.4KB Изтегляне Pre-GDPR No … Comcast Corporation Group …
31 March 2025
… the BOX Group Final decision 121.4KB English Изтегляне Pre-GDPR No … BOX Group …
5 November 2024
… EUR 12 700 on the University of Agder for violation of the GDPR. The University had not taken appropriate measures to … EUR 12 700 on the University of Agder for violation of the GDPR. The University had not taken appropriate measures to …
8 February 2022
… of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria 8 February 2022 …
6 May 2022
… Groupon International Limited 165.2KB English Изтегляне Pre-GDPR No … Groupon International Limited …
9 January 2024
… Travel Group Final decision 2.7MB English Изтегляне Pre-GDPR No … American Express Global Business Travel (Amex GBT) …
19 April 2022
… Netherlands Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body Vereniging Netbeheer …
24 April 2019
… of an Administrative Arrangement pursuant to Article 46.3.b GDPR 157KB German English Изтегляне Opinion / Binding …
23 May 2025
… of the Statkraft Group Decision SA 136.4KB Изтегляне Pre-GDPR No … STATKRAFT GROUP …
27 May 2025
… Group Decision (EN) 251.9KB English French Изтегляне Pre-GDPR No … Worldline Group …
13 August 2025
… Luxembourg Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body ESCEM ASBL Code de …
23 September 2025
… of the Mowi Group Mowi decision NO SA 142.1KB Изтегляне Pre-GDPR No … Mowi …
26 June 2019
… safeguards in the processing, in order to meet the GDPR requirements and to protect the rights of the data … statement/details. Pursuant to Article 5 (1) c) of GDPR (“Principles relating to processing of personal data”), … safeguards in the processing, in order to meet the GDPR requirements and to protect the rights of the data …
29 January 2019
… complaint, despite the obligation provided in Article 12.3 GDPR, according to which the controller shall inform the …
11 June 2021
… calling 1177 with information according to the rules in the GDPR and the Patient Records Act, for example how their … and medical care laid down by law. This is a breach of the GDPR’s principle of lawfulness. Further to the … on behalf of Medhelp. The Data Protection Regulation, the GDPR, lays down obligations also for processors, i.e. …
25 November 2020
… constitutes personal data within the meaning of the GDPR, and the fact that persons are in quarantine … controller is subject to the obligations resulting from the GDPR. UODO also took into account that the confidentiality … to ensure the security of processing. Article 33(1) of the GDPR sets forth that in the case of a personal data breach, …