21 June 2023
… BCR applications since the entering into application of the GDPR. The recommendations provide additional guidance and … essentially equivalent to the one provided by the GDPR. A second set of recommendations for BCR-processors … BCR applications since the entering into application of the GDPR. The recommendations provide additional guidance and …
13 July 2020
… breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The company hired a forensics firm to identify network … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The concerned data subjects were informed of the … incident occurred, e.g. encryption (Arti- cle 34 (3) (a) GDPR) - 3 - The stolen passwords were hashed with PBKDF2-SHA …
18 August 2020
… that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any … that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any …
25 November 2020
… constitutes personal data within the meaning of the GDPR, and the fact that persons are in quarantine … controller is subject to the obligations resulting from the GDPR. UODO also took into account that the confidentiality … to ensure the security of processing. Article 33(1) of the GDPR sets forth that in the case of a personal data breach, …
16 August 2019
… of an Administrative Arrangement pursuant to Article 46.3.b GDPR 258.5KB Download Opinion / Binding decision References … (8) of Act nr. 90/2018 and Article 46, para. 3. b of the GDPR. In the aforementioned request a reference is made to … para. 1 of Act nr. 90/2018 and Article 46, para. 3.b of the GDPR, and having regard to the content of the administrative …
25 November 2020
… Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any … Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any …
… and the EDPB on the interplay between the DMA and the GDPR For any queries, including on older versions of privacy … and the EDPB on the interplay between the DMA and the GDPR For any queries, including on older versions of privacy …
20 January 2023
… of processing (Article 6) Decision: Infringement of the GDPR, Administrative fine and Order to comply Key words: … of processing (Article 6) Decision: Infringement of the GDPR, Administrative fine and Order to comply Key words: …
11 January 2021
… not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative … DPA reminds that pursuant to Article 33 (1) and (3) of the GDPR, in the case of a personal data breach, the controller … not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative …
11 January 2021
… not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative … DPA reminds that pursuant to Article 33 (1) and (3) of the GDPR, in the case of a personal data breach, the controller … not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative …
10 July 2020
… it and does not fulfil the obligation – provided for in the GDPR – to provide it with access to personal data and other … of the personal data protection system specified by the GDPR), the intentional nature of the breach and the … it and does not fulfil the obligation – provided for in the GDPR – to provide it with access to personal data and other …
11 May 2020
… of Article 56.1 of the General Data Protection Regulation (GDPR). lodged a complaint with the CNIL regarding the … in accordance with the provisions of Article 58.2.b) of the GDPR. Indeed, has to ensure and be able to demonstrate that … manner in relation to them (Articles 5.1.a) and 5.2 GDPR). In addition, pursuant to Articles 17.1 and 21.1 GDPR, …
15 October 2024
… stakeholders in the context of a request for an Art. 64(2) GDPR opinion relating to artificial intelligence models (‘AI … stakeholders in the context of a request for an Art. 64(2) GDPR opinion relating to artificial intelligence models (‘AI …
23 April 2024
… services. We also worked hard to raise awareness of the GDPR at the European and international level, so that … services. We also worked hard to raise awareness of the GDPR at the European and international level, so that …
31 May 2022
… on the calculation of administrative fines under the GDPR 12 May 2022 Publication Type: Guidelines Topics: … of the Second Payment Services Directive (PSD2) and GDPR 30 May 2022 Publication Type: Letters Topics: Financial …
25 September 2025
… infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR. In addition, the President of the Personal Data … the processing operations into line with the provisions of GDPR by: implementing appropriate technical and … infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR. In addition, the President of the Personal Data …
21 February 2022
… established by the General Data Protection Regulation or GDPR, which contributes to the consistent application of … established by the General Data Protection Regulation or GDPR, which contributes to the consistent application of …
17 March 2022
… (Art. 32(1) and Art. 32(2)). Decision: infringement of the GDPR, administrative fine. Key words: responsibility of the … The Polish DPA found that the controller infringed the GDPR provisions i.e. Art. 5(1)(f), Art. 24(1), Art. 25(1), … (Art. 32(1) and Art. 32(2)). Decision: infringement of the GDPR, administrative fine. Key words: responsibility of the …
16 May 2022
… safeguards (Article 46). Decision: infringement of the GDPR, order to suspend processing and erasure of personal … of Reykjavík had breached various provisions of the GDPR using Seesaw. Following that decision, the Icelandic SA … safeguards (Article 46). Decision: infringement of the GDPR, order to suspend processing and erasure of personal …
7 October 2019
… Summary Final Decision Art 60 Complaint Infringement of the GDPR EDPBI:EE:OSS:D:2019:55 Background information Date of … Right to erasure (Article 17) Decision: Infringement of the GDPR, issue of reprimand in accordance with Article 58(2)(b) GDPR Key words: Right to object, Right to erasure, …