27 October 2023
… measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) 27 October 2023 Urgent Binding decision of the Board (Art. … measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) …
… The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … Data subjects may exercise their rights under the GDPR by contacting directly the competent national … in accordance with Article 42 (2) of Regulation (EU) 2018/1727 . The national Data Protection Authorities ('DPAs') of …
28 October 2019
… 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press …
5 August 2020
… August 2020 535.1000 A56ID 75410 CR 126887 DD 126889 FD 142710 Final Decision 1. Facts concerning the data breach - … breach or to mitigate its adverse effects (Art. 33 (3) (d) GDPR) The passwords of the affected accounts have been … or public communi- cation (Art. 34(1) or Art. 34(3) (c) GDPR) The controller has notified all data subjects and …
20 May 2025
… Slovenia Background information Date of final decision: 27 February 2025 National case Controller: High school Legal … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper …
8 December 2020
… Opinion 27/2020 on the draft decision of the Danish Supervisory … Adopted Opinion 27/2020 on the draft decision of the Danish Supervisory … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the European Economic Area … the “EDPB”) is to ensure the consistent application of the GDPR throughout the EEA. To this effect, it follows from …
21 December 2018
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … Download Opinion / Binding decision References Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) …
7 September 2022
… Belgium Background information Date of final decision: 27 July 2022 Cross-border case or national case: National … Minimisation (Article 5.1.c) Decision: Infringement of the GDPR; Reprimand; Order to bring the processing operations into compliance with the GDPR Key words: Lawfulness; Purpose limitation; Data …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … had been made public on the municipality’s website on 27 September 2021, by a reporter from Romerikes Blad . The …
2 June 2022
… cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch … priority for the EDPB. At a meeting held in Vienna on 27-28 April 2022, EDPB members agreed to further strengthen … cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch …
26 November 2021
… of processing (Article 32). Decision: Infringement of the GDPR, Fine Key words: Principles, Lawfulness of processing, … on its own initiative whether the project complied with the GDPR. Key findings In its decision, the Icelandic DPA notes … and the company YAY ehf. was fined 4 million ISK (approx. 27.100 Euros). For further information: Icelandic DPA issues …
… and processors List of documents assessed by the EDPB GDPR Certification Standard and Criteria, BC 5701:2024, Version 0.7 Opinion 27/2024 on the Brand Compliance criteria of certification … as European Data Protection Seal pursuant to Article 42.5 (GDPR) 2 December 2024 Publication Type: Opinion of the Board …
3 June 2020
… has the following reference number: INC000002310272. 1. Decision Following a review of the case, the Danish … Article 32(1) of the General Data Protection Regulation (GDPR). The reprimand is issued in accordance with the rules … personal data. According to Article 5(1)(f) of the GDPR, personal data must be processed confidentially, such …
20 January 2023
… imposing a fine. The authority noted that Article 5 of the GDPR indicates the principles concerning the processing of … measures at all. The Polish SA, finding a violation of the GDPR, decided to impose an administrative fine of 340 717,27 EUR on P4 Sp. z o.o., based in Warsaw, the legal …
17 June 2025
… 2025 Finland Background information Date of final decision: 27 May 2025 National case Legal Reference (s): Article 5 … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston …
7 December 2023
… - Following the EDPB’s urgent binding decision of October 27th 2023 , the Irish data protection authority (IE DPA) … adopted an order imposing a temporary ban under Art. 66 (1) GDPR on Meta IE and Facebook Norway AS (“Facebook Norway”) … EDPB concluded that there are ongoing infringements of the GDPR and there is an urgent need to act in light of the …
13 July 2020
… 13 July 2020 631.87 535.699 A56ID 74975 CR 82038 RD 129527 FD 135778 Final Decision The Berlin DPA closes the case. … breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The company hired a forensics firm to identify network … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The concerned data subjects were informed of the …
8 February 2022
… for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic … for the collection of unnecessary patient information (27 January 2022) Decision of the Data Protection Ombudsman … for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic …
24 February 2022
… 2022 Hungary Background information Date of final decision: 27 October 2021 (deadline for appeals: 3 December 2021) … to data subjects under Article 12(1) and Article 13 of the GDPR; data minimisation under Article 5(1)(c); legal basis … under Article 6(1) Decision: finding an infringement of the GDPR, order to bring practices into line with the GDPR, data …
14 November 2019
… guidelines aim to provide a common interpretation of the GDPR for EEA Data Protection Authorities when assessing … the territorial scope of the legal framework, as per Art. 3 GDPR. The Guidelines provide further clarification on the … on the designation and role of a representative under Art. 27 GDPR. The final guidelines integrate updated wording and …