14 January 2022
… (Art. 32(1), Art. 32(2)) Decision: infringement of GDPR, fine issued Key words: principles, processing, … (Art. 32(1), Art. 32(2)) Decision: infringement of GDPR, fine issued Key words: principles, processing, …
 
          24 February 2022
… 31), Powers (Art. 58 (1)(e)) Decision: infringement of GDPR, fine issued Key words: investigative powers, lack of … 31), Powers (Art. 58 (1)(e)) Decision: infringement of GDPR, fine issued Key words: investigative powers, lack of …
 
          10 February 2022
… Spain Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body Internal Code of Conduct …
 
          7 December 2023
… measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) … Enforcement notice in the matter of Meta Platforms …
 
          10 June 2021
… of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For … of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For …
 
          10 March 2020
… violations of, inter alia, Art. 5(1)f and Art. 32 of the GDPR. When determining the fine, the SA referred to the … violations of, inter alia, Art. 5(1)f and Art. 32 of the GDPR. When determining the fine, the SA referred to the …
 
          24 May 2022
… of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 … of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 …
 
          15 March 2022
… 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access … 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access …
 
          17 June 2025
… was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston …
 
          3 March 2022
… data subject (Article 34(1)) Decision: Infringement of the GDPR, administrative fine             Key words: information … data subject (Article 34(1)) Decision: Infringement of the GDPR, administrative fine             Key words: information …
 
          31 March 2022
… of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of … of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of …
 
          25 November 2019
… provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) … provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) …
 
          7 May 2025
… 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, … 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, …
 
          6 February 2025
… in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an … in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an …
 
          8 February 2022
… for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic … for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic …
 
          
… processing operations by processors in accordance with the GDPR using the EuroPriSe method Type of criteria National …
 
          13 May 2021
… contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has … contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has …
 
          6 January 2023
… of the processing of their personal data as required by the GDPR.   For further information: press release: … of the processing of their personal data as required by the GDPR.   For further information: press release: …
 
          21 June 2021
… who operate the public transport in Stockholm, has violated GDPR when equipping ticket inspectors with body cameras that … who operate the public transport in Stockholm, has violated GDPR when equipping ticket inspectors with body cameras that …
 
          30 April 2020
… The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s … The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s …