EDPBI:SE:OSS:D:2025:1689
EDPBI:SE:OSS:D:2025:1689
- CSA
-
-
at
-
no
-
de
-
fr
-
it
-
dk
-
fi
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Reprimand
Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group
Go to
Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group
Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
Go to
Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
Opinion 26/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Snowflake Group
Go to
Opinion 26/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Snowflake Group
EDPBI:FR:OSS:D:2021:295
EDPBI:FR:OSS:D:2021:295
- CSA
-
-
de
-
dk
-
pt
-
at
-
it
-
nl
-
pl
-
es
-
se
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- No sanction
Verhaltensregeln für Internet Service Provider / Code of Conduct for Internet Service Providers
- Scope
- National
- Type
- Code for Controllers/Processors subject to GDPR
- Code Owner
- Internet Service Providers Austria (ISPA) - Verband der österreichischen Internet-Anbieter
- Monitoring body
Aufsichtsbeirat der ISPA (internal monitoring body)
https://www.ispa.at/wissenspool/datenschutz/- Relevant topics
EDPBI:FR:OSS:D:2021:310
EDPBI:FR:OSS:D:2021:310
- CSA
-
-
be
-
de
-
lu
-
it
-
nl
-
es
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 28 (Processor)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Administrative fine
EDPBI:SE:OSS:D:2021:300
EDPBI:SE:OSS:D:2021:300
- CSA
-
-
de
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand
Bioclinica Group
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Suppliers
- Employees, suppliers, service providers and customers, including their contact persons
EDPBI:SE:OSS:D:2025:3762
EDPBI:SE:OSS:D:2025:3762
- CSA
-
-
at
-
dk
-
ee
-
fi
-
fr
-
hu
-
ie
-
it
-
nl
-
pl
-
es
-
no
-
de
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand