14 December 2021
… Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory … Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory …
19 January 2026
… to be found in Processor Binding Corporate Rules (Art. 47 GDPR) Start Date: 19 January 2026 End Date: 02 March 2026 … to be found in Processor Binding Corporate Rules (Art. 47 GDPR) …
24 July 2020
… an infringement of the General Data Protection Regulation (GDPR). Justification: Our decision is based on the following … Data Protection Regulation. Pursuant to Art. 12(3) of the GDPR, the controller must provide the data subject with … the measures taken upon request pursuant to Art. 15 to 22 GDPR without delay, but at the latest within one month of …
2 June 2020
… Cyprus Subject: Investigation of complaint under the GDPR - erasure request of the user Dear I am writing further … Gaijin are justified and in line with article 12.6 of the GDPR. I value that the information requested by the Support … you are reminded that according to Article 12.2 of the GDPR the controller is under the obligation to facilitate …
6 July 2020
… tion (EU) 2016/679 (General Data Protection Regulation - GDPR). REASONS A. Arguments of the parties and procedure 1. … procedure in accordance with the provisions of the GDPR. It turned out that the controller’s main es- … authority in this procedure pursuant to Art. 56(1) GDPR. 3. On 5 August 2019, the Austrian DPA requested the …
16 June 2020
… breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The passwords of affected users were blocked and … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The persons concerned were informed about the incident … incident occurred, e.g. encryption (Arti- cle 34 (3) (a) GDPR) Even before the incident, a salted hash method was …
… from the data protection supervisory authorities AT SA GDPR article 97 questionnaire BE SA GDPR article 97 questionnaire BG SA GDPR article 97 questionnaire CY SA GDPR article 97 … AT SA GDPR article 97 questionnaire BE SA GDPR article 97 questionnaire BG SA GDPR article 97 …
… from the data protection supervisory authorities AT SA GDPR article 97 questionnaire BE SA GDPR article 97 questionnaire BG SA GDPR article 97 questionnaire CY SA GDPR article 97 … AT SA GDPR article 97 questionnaire BE SA GDPR article 97 questionnaire BG SA GDPR article 97 …
29 June 2020
… of the General Data Protection Regulation (hereinafter: GDPR), and Section 38(3)(a) of Act CXII of 2011 on the Right … authorities concerned according to Article 56 of GDPR. In the course of this, it was established that the … a lead supervisory authority according to Article 56(1) of GDPR. The Complainant’s query of 30 June 2018 can, however, …
13 July 2020
… breach or to mitigate its adverse effects (Art. 33 (3) (d) GDPR) Once the activities were detected, the passwords of … or public communi- cation (Art. 34(1) or Art. 34(3) (c) GDPR) All data subjects concerned were notified on 6 … the incident occurred, e.g. encryption (Article 34 (3) (a) GDPR) Standard Microsoft security features for Office 365, …
3 June 2020
… Article 32(1) of the General Data Protection Regulation (GDPR). The reprimand is issued in accordance with the rules … personal data. According to Article 5(1)(f) of the GDPR, personal data must be processed confidentially, such … in conformity with Article 5(1)(f) and Article 32(1) of the GDPR. Concerning Danske Bank A/S’ decision not to notify the …
28 April 2020
… infringement of the Gen- eral Data Protection Regulation (GDPR) when processing personal data in your area of … exercised his right to information under Article 15 GDPR. You only fulfilled the right to information after we … vidual employee. There has been a breach of Art. 12 (3) (1) GDPR (one- month period). You have also transferred data …
7 April 2020
… the Berlin DPA of the data breach pursuant to Art. 33 GDPR and notified the data subjects, including the complainant, ac- cording to Art. 34 GDPR. (Please see IMI A60DD 102273 for the draft deci- sion … notified the LSA of the data breach pursuant to Art 33 GDPR and notified the data subjects, including the …
18 June 2020
… of personal data. In accordance with Article 56 of the GDPR1, the Danish DPA has been designated as the lead … set out in Article 32(1), Article 5(1)(a) and Article 33(1) GDPR. Below is a closer look at the case and a justification … OWEEX, Ascio has failed to comply with Article 32(1) of the GDPR. The Danish DPA also considers that, by failing to …
10 March 2020
… a response to the issue raised as per Article 58.1(a) GDPR, in particular as regards to the lawfulness of the … fulfilled its obligations under Regulation (EU) 2016/679 (GDPR) by immediately addressing the issue. As the complaint … other supervisory authorities concerned as per Article 60.3 GDPR (IMI entry number 108026). As none of the other …
10 March 2020
… a response to the issue raised as per Article 58.1(a) GDPR, in particular as regards the complainants right to … fulfilled its obligations under Regulation (EU) 2016/679 (GDPR) by immediately addressing the issue. As the complaint … other supervisory authorities concerned as per Article 60.3 GDPR (IMI entry number 107971). As none of the other …
10 March 2020
… a response to the issue raised as per Article 58.1(a) GDPR, in particular as regards the complainants right to … fulfilled its obligations under Regulation (EU) 2016/679 (GDPR) by immediately addressing the issue. As the complaint … other supervisory authorities concerned as per Article 60.3 GDPR (IMI entry number 107959). As none of the other …
3 February 2023
… Reference: Data retention periods (article 5.1.e of the GDPR), Information to individuals (article 13 of the GDPR), Data protection by default (article 25.2 of the GDPR), Security of processing (article 32 of the GDPR), Data … Reference: Data retention periods (article 5.1.e of the GDPR), Information to individuals (article 13 of the GDPR), …
20 July 2018
… innovation of the General Data Protection Regulation (GDPR) is the new way in which the supervisory authorities of … share information with other supervisory authorities. The GDPR sets specific deadlines for each phase of the … to be kept informed on the state of play of a case. The GDPR does not offer a quick fix in case of a complaint but …
15 July 2019
… Committee on the implications of the US CLOUD Act Art.64 GDPR Opinion on Standard Contractual Clauses for processors under Art.28.8 GDPR by DK SA Art. 64 GDPR Opinion on Accreditation Criteria for monitoring bodies … Committee on the implications of the US CLOUD Act Art.64 GDPR Opinion on Standard Contractual Clauses for processors …