6 February 2025
… Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data) Decision: Administrative fine, Compliance order Key … Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 …
8 July 2019
… Intention to fine British Airways £183.39m under GDPR for data breach 8 July 2019 United Kingdom Following an … British Airways £183.39M for infringements of the General Data Protection Regulation (GDPR). The proposed fine relates to a … British Airways £183.39M for infringements of the General Data Protection Regulation (GDPR). The proposed fine relates …
11 January 2021
… Polish DPA: A data breach must be notified to the supervisory authority 11 … on ENEA S.A. company for failing to notify a personal data breach. The Polish DPA received information about the personal data breach from a person who became an unauthorized … on ENEA S.A. company for failing to notify a personal data breach. The Polish DPA received information about the …
26 April 2023
… end on 15 May 2024. The following Heads of national data protection authorities (DPAs) expressed their interest to … end on 15 May 2024. The following Heads of national data protection authorities (DPAs) expressed their interest to …
25 September 2020
… prior consent as well as neglecting the rights of the data subject 25 September 2020 Finland Financial sanction … prior consent as well as neglecting the rights of the data subject The sanctions board of the Finnish Data Protection Ombudsman has imposed an administrative fine on …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
20 September 2019
… 20 September 2019 Poland The President of the Personal Data Protection Office imposed a fine of an amount higher than … and technical measures for the protection of personal data were not appropriate to the risk posed by the … The President of the Personal Data Protection Office imposed a fine of an amount higher …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
28 November 2019
… The Belgian Data Protection Authority imposes two new fines 28 November 2019 … has imposed a fine of €5000 on a mayor and a municipal officer in two separate cases. These fines were imposed … The Belgian Data Protection Authority has imposed a fine of €5000 on a …
7 May 2021
… a special webpage. Check it out here to learn more about data protection and privacy in the EU. For more information … a special webpage. Check it out here to learn more about data protection and privacy in the EU. For more information …
18 June 2020
… EDPB Response to Ailidh Callander, Legal Officer (Privacy International) 18 June 2020 Letters EDPB … national supervisory authorities. The role of the European Data Protection Board is to ensure the consistent application of … EDPB Response to Ailidh Callander, Legal Officer (Privacy International) …
11 September 2020
… 11 September 2020 Poland The President of the Personal Data Protection Office, after having found a personal data … UODO stated that in the case concerned the Data Protection Officer (DPO) performed its tasks without having due regard … The President of the Personal Data Protection Office, after having found a personal data …
7 October 2021
… SA: Police reprimanded for illegal processing of personal data with facial recognition software 7 October 2021 Finland … Reference: Art. 14 in the Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining … Summary of the Decision Origin of the case The Deputy Data Protection Ombudsman has issued a statutory reprimand to the …
15 July 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: … recalled that, according to the GDPR and the Italian Data Protection Code, the use of biometric data in the workplace …
20 July 2020
… authority 20 July 2020 The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on an … provide the President of the UODO with access to personal data and other information necessary for the performance of … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on …
… is to ensure a consistent application and enforcement of data protection law across the European Economic Area, EEA. To … to clarify and promote a common understanding of EU data protection laws; adopts opinions addressed to the … is to ensure a consistent application and enforcement of data protection law across the European Economic Area, EEA. …
17 January 2024
… action , which focused on the designation and position of Data Protection Officers (DPOs). The report is the result of an EU-wide … action , which focused on the designation and position of Data Protection Officers (DPOs). The report is the result of an …
… this. This translates in practice into documenting data protection practices and choices. Compliance tools such as … corporate rules - as well as appointing a data protection officer - help companies in their compliance efforts and … this. This translates in practice into documenting data protection practices and choices. Compliance tools …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … fine Key words: Administrative fine, Anti-Money Laundering, Data security, Lawfulness of processing, Data subject rights, Data protection by design and by default Summary of the Decision …
17 October 2023
… action, the EDPB prioritises a certain topic for data protection authorities (DPAs) to work on at the national … selected the designation and position of data protection officers (DPOs). The report on the outcome of the 2023 … action, the EDPB prioritises a certain topic for data protection authorities (DPAs) to work on at the …