23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
27 June 2022
… The CNPD adopts the certification mechanism GDPR-CARPA 27 June 2022 Luxembourg Luxembourg becomes the first country … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission …
3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact …
21 December 2018
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … Download Opinion / Binding decision References Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) … 1 Number: 014-1/2018/12 Date: 21 December 2018 …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
… and processors List of documents assessed by the EDPB GDPR Certification Standard and Criteria, BC 5701:2024, Version 0.7 Opinion 27/2024 on the Brand Compliance criteria of certification … as European Data Protection Seal pursuant to Article 42.5 (GDPR) 2 December 2024 Publication Type: Opinion of the Board …
28 October 2019
… 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press …
7 September 2022
… Belgium Background information Date of final decision: 27 July 2022 Cross-border case or national case: National … Minimisation (Article 5.1.c) Decision: Infringement of the GDPR; Reprimand; Order to bring the processing operations into compliance with the GDPR Key words: Lawfulness; Purpose limitation; Data …
2 June 2022
… cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch … priority for the EDPB. At a meeting held in Vienna on 27-28 April 2022, EDPB members agreed to further strengthen … cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … had been made public on the municipality’s website on 27 September 2021, by a reporter from Romerikes Blad . The …
26 November 2021
… of processing (Article 32). Decision: Infringement of the GDPR, Fine Key words: Principles, Lawfulness of processing, … on its own initiative whether the project complied with the GDPR. Key findings In its decision, the Icelandic DPA notes … and the company YAY ehf. was fined 4 million ISK (approx. 27.100 Euros). For further information: Icelandic DPA issues …
29 January 2021
… of a code of conduct monitoring body pursuant to Article 41 GDPR Decision Type SA Finland 29 January 2021 Code of conduct FI SA accreditation requirements for a GDPR code of conduct monitoring bodies 126.6KB Download file … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard …
… . The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … here . Data subjects may exercise their rights under the GDPR by contacting directly the competent national … here . Data subjects may exercise their rights under the GDPR by contacting directly the competent national …
20 January 2023
… imposing a fine. The authority noted that Article 5 of the GDPR indicates the principles concerning the processing of … measures at all. The Polish SA, finding a violation of the GDPR, decided to impose an administrative fine of 340 717,27 EUR on P4 Sp. z o.o., based in Warsaw, the legal …
7 December 2023
… - Following the EDPB’s urgent binding decision of October 27th 2023 , the Irish data protection authority (IE DPA) … adopted an order imposing a temporary ban under Art. 66 (1) GDPR on Meta IE and Facebook Norway AS (“Facebook Norway”) … EDPB concluded that there are ongoing infringements of the GDPR and there is an urgent need to act in light of the …
10 December 2019
… Clauses for the purposes of compliance with art. 28 GDPR Decision Type SA Denmark 10 December 2019 Controller … dk_sa_standard_contractual_clauses_january_2020_en.pdf 276.5KB Bulgarian Czech German Greek English Spanish … Contractual Clauses submitted by the DK SA (Article 28(8) GDPR) … Štandardné zmluvné doložky december 2019 Strana 1 z …
8 February 2022
… for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic … for the collection of unnecessary patient information (27 January 2022) Decision of the Data Protection Ombudsman … for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic …
14 November 2019
… guidelines aim to provide a common interpretation of the GDPR for EEA Data Protection Authorities when assessing … the territorial scope of the legal framework, as per Art. 3 GDPR. The Guidelines provide further clarification on the … on the designation and role of a representative under Art. 27 GDPR. The final guidelines integrate updated wording and …
24 February 2022
… 2022 Hungary Background information Date of final decision: 27 October 2021 (deadline for appeals: 3 December 2021) … to data subjects under Article 12(1) and Article 13 of the GDPR; data minimisation under Article 5(1)(c); legal basis … under Article 6(1) Decision: finding an infringement of the GDPR, order to bring practices into line with the GDPR, data …
6 September 2020
… 07/2020 on the concepts of controller and processor in the GDPR Guidelines 07/2020 on the concepts of controller and processor in the GDPR Start Date: 07 September 2020 End Date: 19 October 2020 … 27 PART II – CONSEQUENCES OF ATTRIBUTING DIFFERENT …