6 July 2020
… 631.47.3 06 July 2020 A56ID 66040 Case Register 72790 DD 103674 Final Decision The Berlin Commissioner for … tion (EU) 2016/679 (General Data Protection Regulation - GDPR). REASONS A. Arguments of the parties and procedure 1. … procedure in accordance with the provisions of the GDPR. It turned out that the controller’s main es- …
27 February 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Liechtenstein 27 February 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 List of processing operations according to Art. 35 (4) GDPR, for which the Data Protection Authority (DSS) as the …
6 April 2022
… Ireland Group plc Legal Reference: Article 32(1), 33 and 34 GDPR Decision: Infringement of Article 32(1), 33 and 34 GDPR, Order to comply with article 32(1) GDPR, Issued … Protection Commission (DPC) between 9 November 2018 and 27 June 2019. The notifications related to the corruption of …
3 December 2024
… Data Protection Board (EDPB) published guidelines on Art.48 GDPR about data transfers to third country authorities and … it must comply with the General Data Protection Regulation (GDPR). In its guidelines, the EDPB zooms in on Art. 48 GDPR … The guidelines are subject to public consultation until 27 January 2025. Approval of EU Data Protection Seal During …
13 September 2024
… 2024 Greece Background information Date of final decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and transparency; GDPR: Article 6.1.f: Processing based on legitimate … decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and …
13 July 2020
… breach or to mitigate its adverse effects (Art. 33 (3) (d) GDPR) Once the activities were detected, the passwords of … of our PGP-Key: D3C9 AEEA B403 7F96 7EF6 C77F B607 1D0F B27C 29A7 Office hours Daily from 10 am to 3 pm, Thursdays … or public communi- cation (Art. 34(1) or Art. 34(3) (c) GDPR) All data subjects concerned were notified on 6 …
12 May 2022
… on the calculation of administrative fines under the GDPR Guidelines 04/2022 on the calculation of administrative fines under the GDPR Start Date: 16 May 2022 End Date: 27 June 2022 Public consultation reference: 04/2022 … on the calculation of administrative fines under the GDPR …
20 July 2022
… case Controller: Clearview AI Inc. Legal Reference: GDPR: Article 3: Territorial scope. Article 5(1)(a) and (2): … not established in the Union. Decision: Infringement of the GDPR, Administrative fine. Key words: Web scraping, Images … 9 GDPR) and its obligations under Articles 12, 14, 15 and 27 of the GDPR. Decision: The Hellenic DPA imposed a fine …
13 October 2021
… 2021 Norway Background information Date of final decision: 27 September 2021 Cross-border case or national case: … Controller: Ferde AS Legal Reference: Processor (ARTICLE 28 GDPR), Security of Processing (ARTICLE 32 GDPR), General principle for transfers (ARTICLE 44 GDPR) …
3 December 2024
… Guidelines 02/2024 on Article 48 GDPR Guidelines 02/2024 on Article 48 GDPR Start Date: 03 December 2024 End Date: 27 January 2025 Public consultation reference: 02/2024 … Guidelines 02/2024 on Article 48 GDPR …
18 June 2020
… of personal data. In accordance with Article 56 of the GDPR1, the Danish DPA has been designated as the lead … set out in Article 32(1), Article 5(1)(a) and Article 33(1) GDPR. Below is a closer look at the case and a justification … Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with …
16 June 2020
… 9,973 o Netherlands: 8,290 o Portugal: 7,098 o Austria: 6,327 o Hungary: 5,379 o Romania: 5,017 o Sweden: 4,303 o … breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The passwords of affected users were blocked and … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The persons concerned were informed about the incident …
25 May 2023
… Chair Andrea Jelinek. She was elected with 19 votes out of 27, in two rounds. Anu Talus is the head of the Finnish Data … the newly adopted EU digital legislation overlaps with the GDPR. Going forward, it is crucial to ensure that the legal … foundations to build upon. In the past five years, the GDPR has become a global landmark as the world’s most …
15 July 2025
… 2025 Italy Background information Date of final decision: 27 March 2025 National case Controller: Istituto di … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of …
27 June 2022
… The CNPD adopts the certification mechanism GDPR-CARPA 27 June 2022 Luxembourg Luxembourg becomes the first country … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission …
23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
27 September 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 State Current 2019 No 6441827 November 2019 Decision concerning list of types of …
23 June 2020
… based on Articles 33-34 of the Regulation (EU) 2016/6791 (’GDPR’) concerning the data breach notified to the NAIH on … fully complied with the provisions of Articles 33-34 of the GDPR. Based on the data breach notification and the … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …