EDPBI:FR:OSS:D:2024:1406
EDPBI:FR:OSS:D:2024:1406
- CSA
-
-
at
-
be
-
cz
-
hu
-
nl
-
pl
-
sk
-
DE (Baden-Wüerttemberg)
-
DE SA (Bavaria)
-
DE/BE
-
DE/BB
-
DE SA (Hessen)
-
DE/NI
-
DE/MV
-
DE SA (Rhineland-Palatinate)
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 21 (Right to object)
- Article 7 (Conditions for consent)
- Relevant topics
- Outcome
- Compliance order
EDPBI:SE:OSS:D:2023:824
EDPBI:SE:OSS:D:2023:824
- CSA
-
-
ee
-
dk
-
de
-
no
-
fi
-
pt
-
es
-
at
-
- Main legal reference
- Article 4 (Definitions)
- Article 44 (General principle for transfers)
- Article 46 (Transfers subject to appropriate safeguards)
- Relevant topics
- Outcome
- Administrative fine
- Compliance order
EDPBI:DE:OSS:D:2020:104
EDPBI:DE:OSS:D:2020:104
- CSA
-
-
de
-
at
-
be
-
dk
-
es
-
fr
-
it
-
lu
-
no
-
si
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Reprimand
Infosys Group
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Clients, customers
- Other third parties as part of the Group’s respective regular business activities
Recommendations 1/2026 on the Application for Approval and on the elements and principles to be found in Processor Binding Corporate Rules (Art. 47 GDPR)
Go to Recommendations 1/2026 on the Application for Approval and on the elements and principles to be found in Processor Binding Corporate Rules (Art. 47 GDPR)
EDPBI:IE:OSS:D:2025:3396
EDPBI:IE:OSS:D:2025:3396
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
es
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 18 (Right to restriction of processing)
- Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing)
- Article 20 (Right to data portability)
- Article 21 (Right to object)
- Article 22 (Automated individual decision-making, including profiling)
- Relevant topics
- Outcome
- Reprimand
EDPBI:FR:OSS:D:2019:8
EDPBI:FR:OSS:D:2019:8
- CSA
-
-
at
-
be
-
DE SA (Bavaria)
-
DE/MV
-
DE/NI
-
- Main legal reference
- Article 21 (Right to object)
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Relevant topics
- Outcome
- No violation
Guidelines 07/2020 on the concepts of controller and processor in the GDPR
Go to Guidelines 07/2020 on the concepts of controller and processor in the GDPR
EDPBI:DK:OSS:D:2023:992
EDPBI:DK:OSS:D:2023:992
- CSA
-
-
se
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- No violation