EDPBI:FR:OSS:D:2024:1406
EDPBI:FR:OSS:D:2024:1406
- CSA
-
-
at
-
be
-
cz
-
hu
-
nl
-
pl
-
sk
-
DE (Baden-Wüerttemberg)
-
DE SA (Bavaria)
-
DE/BE
-
DE/BB
-
DE SA (Hessen)
-
DE/NI
-
DE/MV
-
DE SA (Rhineland-Palatinate)
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 21 (Right to object)
- Article 7 (Conditions for consent)
- Relevant topics
- Outcome
- Compliance order
EDPBI:DE:OSS:D:2020:104
EDPBI:DE:OSS:D:2020:104
- CSA
-
-
de
-
at
-
be
-
dk
-
es
-
fr
-
it
-
lu
-
no
-
si
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Reprimand
Infosys Group
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Clients, customers
- Other third parties as part of the Group’s respective regular business activities
Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority
Go to Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority
EDPBI:DK:OSS:D:2023:992
EDPBI:DK:OSS:D:2023:992
- CSA
-
-
se
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- No violation
EDPBI:IE:OSS:D:2025:3396
EDPBI:IE:OSS:D:2025:3396
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
es
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 18 (Right to restriction of processing)
- Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing)
- Article 20 (Right to data portability)
- Article 21 (Right to object)
- Article 22 (Automated individual decision-making, including profiling)
- Relevant topics
- Outcome
- Reprimand
EDPBI:FR:OSS:D:2019:8
EDPBI:FR:OSS:D:2019:8
- CSA
-
-
at
-
be
-
DE SA (Bavaria)
-
DE/MV
-
DE/NI
-
- Main legal reference
- Article 21 (Right to object)
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Relevant topics
- Outcome
- No violation
EDPB Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679) - Annex 1
Go to EDPB Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679) - Annex 1Guidelines 02/2024 on Article 48 GDPR
Go to Guidelines 02/2024 on Article 48 GDPR
EDPBI:MT:OSS:D:2022:375
EDPBI:MT:OSS:D:2022:375
- CSA
-
-
es
-
pl
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Reprimand