3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, …
23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
… The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … Data subjects may exercise their rights under the GDPR by contacting directly the competent national … in accordance with Article 42 (2) of Regulation (EU) 2018/1727 . The national Data Protection Authorities ('DPAs') of …
18 June 2020
… of personal data. In accordance with Article 56 of the GDPR1, the Danish DPA has been designated as the lead … set out in Article 32(1), Article 5(1)(a) and Article 33(1) GDPR. Below is a closer look at the case and a justification … Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with …
10 May 2019
… processing of the complainant’s data as per Article 58.1(a) GDPR, in particular as regards the limitation of the … 2013, opened a account on This account was suspended on 27 November 2016 due to non-compliance with policies for … of the obligations set out in Regulation (EU) 2016/679 (GDPR) by . As the complaint has only a limited personal …
17 December 2019
… required for the notifi- cation pursuant to Art. 33 GDPR, including the technical information of the hacked … of the incident and the measures taken, so that Art. 34 GDPR was also complied with. Causes of the injury A hacker … of our PGP-Key: D3C9 AEEA B403 7F96 7EF6 C77F B607 1D0F B27C 29A7 Office hours Daily from 10 am to 3 pm, Thursdays …
16 June 2020
… 9,973 o Netherlands: 8,290 o Portugal: 7,098 o Austria: 6,327 o Hungary: 5,379 o Romania: 5,017 o Sweden: 4,303 o … breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The passwords of affected users were blocked and … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The persons concerned were informed about the incident …
27 June 2022
… The CNPD adopts the certification mechanism GDPR-CARPA 27 June 2022 Luxembourg Luxembourg becomes the first country … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission …
28 October 2019
… 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press …
20 May 2025
… Slovenia Background information Date of final decision: 27 February 2025 National case Controller: High school Legal … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper …
27 September 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 State Current 2019 No 6441827 November 2019 Decision concerning list of types of …
27 October 2023
… measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) 27 October 2023 Urgent Binding decision of the Board (Art. … measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) …
7 September 2022
… Belgium Background information Date of final decision: 27 July 2022 Cross-border case or national case: National … Minimisation (Article 5.1.c) Decision: Infringement of the GDPR; Reprimand; Order to bring the processing operations into compliance with the GDPR Key words: Lawfulness; Purpose limitation; Data …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … had been made public on the municipality’s website on 27 September 2021, by a reporter from Romerikes Blad . The …
2 June 2022
… cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch … priority for the EDPB. At a meeting held in Vienna on 27-28 April 2022, EDPB members agreed to further strengthen … cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch …
26 November 2021
… of processing (Article 32). Decision: Infringement of the GDPR, Fine Key words: Principles, Lawfulness of processing, … on its own initiative whether the project complied with the GDPR. Key findings In its decision, the Icelandic DPA notes … and the company YAY ehf. was fined 4 million ISK (approx. 27.100 Euros). For further information: Icelandic DPA issues …
21 December 2018
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … Download Opinion / Binding decision References Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) …
8 December 2020
… Opinion 27/2020 on the draft decision of the Danish Supervisory … Adopted Opinion 27/2020 on the draft decision of the Danish Supervisory … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the European Economic Area … the “EDPB”) is to ensure the consistent application of the GDPR throughout the EEA. To this effect, it follows from …
23 June 2020
… based on Articles 33-34 of the Regulation (EU) 2016/6791 (’GDPR’) concerning the data breach notified to the NAIH on … fully complied with the provisions of Articles 33-34 of the GDPR. Based on the data breach notification and the … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …