16 May 2022
… - article 35(2) icw 38(1) Decision: infringement of the GDPR, administrative fines Key words: illegally processing … violations of the General Data Protection Regulation (GDPR). For example, the Tax Administration had no statutory … - article 35(2) icw 38(1) Decision: infringement of the GDPR, administrative fines Key words: illegally processing …
20 January 2023
… Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to … without consent in accordance with Article 6(1)(a) of the GDPR. Estonian SA issued a precept with a penalty payment of … Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to …
7 May 2025
… fine of 60 000 € for infringement of Article 38(3) of the GDPR and a fine of 72 000 € for infringement of Articles 30(1), 35(1,7) of the GDPR. Total amount of imposed fine on Toyota Bank Polska … fine of 60 000 € for infringement of Article 38(3) of the GDPR and a fine of 72 000 € for infringement of Articles …
25 September 2025
… fine for an infringement of Article 58 (1)(a) and (e) GDPR. The entrepreneur was informed of the opening of the … fine of EUR 4 500 for infringement of Article 58 (1)(a,e) GDPR. For further information: • National press release: … fine for an infringement of Article 58 (1)(a) and (e) GDPR. The entrepreneur was informed of the opening of the …
28 January 2025
… share and login-in you leave behind a digital trail. The GDPR ensures that your data can only be used in ways you … share and login-in you leave behind a digital trail. The GDPR ensures that your data can only be used in ways you …
3 February 2022
… of processing (Article 6). Decision: Infringement of the GDPR, order to comply. Key words: … operations into compliance with the provisions of the GDPR within six months of this decision. For further … of processing (Article 6). Decision: Infringement of the GDPR, order to comply. Key words: …
1 July 2021
… established by the General Data Protection Regulation (GDPR). Furthermore, the enterprise had failed to fulfil its duty to provide information (Article 13 of the GDPR), its duty to delete the contents of the complainant’s … established by the General Data Protection Regulation (GDPR). Furthermore, the enterprise had failed to fulfil its …
10 March 2021
… national authorities responsible for enforcement of the GDPR should be entrusted with the oversight of the privacy … the current ePrivacy Directive, and should complement the GDPR by providing additional strong guarantees for … national authorities responsible for enforcement of the GDPR should be entrusted with the oversight of the privacy …
28 July 2020
… interplay of the Second Payment Services Directive and the GDPR - version for public consultation letter to MEP Ďuriš … interplay of the Second Payment Services Directive and the GDPR - version for public consultation letter to MEP Ďuriš …
11 November 2020
… In doing so, the EDPB seeks a consistent application of the GDPR and the Court’s ruling across the EEA. EDPB Chair, … to the decisions they take on that basis, in line with the GDPR principle of accountability. Moreover, data exporters … as not impinging on the commitments of the Article 46 GDPR transfer tool the data exporter and importer rely on. …
14 February 2019
… taken into consideration. Since the EDPB is required by the GDPR (art. 70(4)) to make the results of this consultation … in accordance with the legal requirements provided by the GDPR and, where applicable, by national legislation. 2 SCOPE … of processing operations of controllers under the GDPR without specifying further the area of application …
14 October 2021
… obligations under data protection law (Article 12, 13 GDPR) through this procedure, as the customers were not … permissible at all. This is not explicitly regulated in the GDPR; there are no clear legal requirements in this respect. … obligations under data protection law (Article 12, 13 GDPR) through this procedure, as the customers were not …
10 October 2019
… guidelines on the scope and application of Article 6(1)(b) GDPR in the context of information society services. … Equinix BCRs contain all elements required under article 47 GDPR and WP256 rev01 and contain the appropriate safeguards. … guidelines on the scope and application of Article 6(1)(b) GDPR in the context of information society services. …
28 March 2022
… Media Magazines B.V. Legal Reference: article 12 (2) GDPR Decision: Infringement of the GDPR, administrative fine Key words: identity document; … Media Magazines B.V. Legal Reference: article 12 (2) GDPR Decision: Infringement of the GDPR, administrative …
21 April 2022
… data pertaining to a special category of data under the GDPR (health data). The temperature checks were mainly based … of Mobility, which does not meet the criteria of the GDPR, i.e. to be a clear and precise legal standard whose … data pertaining to a special category of data under the GDPR (health data). The temperature checks were mainly based …
13 May 2021
… fined Basaren Drift AS NOK EUR 20,000 (NOK 200,000) for a GDPR violation. The case relates to CCTV surveillance of … premises. The General Data Protection Regulation (GDPR) requires that all processing of personal data must … fined Basaren Drift AS NOK EUR 20,000 (NOK 200,000) for a GDPR violation. The case relates to CCTV surveillance of …
17 July 2020
… that is essentially equivalent to the one guaranteed by the GDPR in light of the EU Charter. The assessment of whether … light of the non-exhaustive factors set out under Art 45(2) GDPR. If the result of this assessment is that the country … The EDPB recalls that it issued guidelines on Art 49 GDPR derogations (2); and that such derogations must be …
16 April 2021
… on the EDPB website. Opinion 14/2021 is based on the GDPR and assesses both general data protection aspects and … on the EDPB website. Opinion 14/2021 is based on the GDPR and assesses both general data protection aspects and …
20 April 2023
… of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and … should be made compliant with the provisions of the GDPR within six months from the date of delivery of the … of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and …
2 September 2024
… the defendant has breached the articles 12.2, 12.3 et 15 GDPR because of the 14 month late reply and because the … sanction is based only on the infringement of article 15 GDPR, since both articles 12.2 et 12.3 were not in the … the defendant has breached the articles 12.2, 12.3 et 15 GDPR because of the 14 month late reply and because the …