5 January 2022
… Accountability (Art. 5(2)) Decision: Infringement of the GDPR, administrative fine and reprimand Key words: personal … Ombudsman issued Vastaamo a reprimand on violating the GDPR. The sanctions board of the Office of the Data … Accountability (Art. 5(2)) Decision: Infringement of the GDPR, administrative fine and reprimand Key words: personal …
12 February 2021
… have been breached: Violation of Article 32 (1) of the GDPR, by failing to implement appropriate technical and … appropriate to the risk. Violation of Article 33 of the GDPR, by failing to notify the personal data breach to the … have been breached: Violation of Article 32 (1) of the GDPR, by failing to implement appropriate technical and …
21 October 2020
… by Design and by Default (DPbDD) as set forth in Art. 25 GDPR. The core obligation enshrined in Art.25 is the … purpose, while applying all the other principles of the GDPR. The EDPB further highlighted that it is in continuous … by Design and by Default (DPbDD) as set forth in Art. 25 GDPR. The core obligation enshrined in Art.25 is the …
… and the EDPB on the interplay between the DMA and the GDPR EDPB-EDPS Support Pool of Experts – Cycle 2 For any … and the EDPB on the interplay between the DMA and the GDPR EDPB-EDPS Support Pool of Experts – Cycle 2 For any …
16 October 2020
… measures, as required by Article 5(1)(f) and by Article 32 GDPR. The LSA concluded that there are a number of … constitute a serious failure to comply with the GDPR. The LSA decided to impose on the controller an …
2 May 2025
… Article 6(1), 9(1) in relation with Article 13(1,2) of the GDPR and a fine of 105 000 € for infringement of Articles 24(1), 25(1,) and 32(1,2) of the GDPR. Total amount of imposed fine on Centrum Medyczne … Article 6(1), 9(1) in relation with Article 13(1,2) of the GDPR and a fine of 105 000 € for infringement of Articles …
6 February 2025
… data in compliance with the principles expressed in the GDPR. Losing a laptop is losing a laptop represents an … ZHP for infringement of Articles 5, 24, 25 and 32 of the GDPR. Chorągiew was ordered to implement appropriate data … data in compliance with the principles expressed in the GDPR. Losing a laptop is losing a laptop represents an …
1 July 2018
… Clients, customers Suppliers, service providers Pre-GDPR Yes … Giesecke + Devrient GmbH …
1 July 2018
… Clients, customers Suppliers, service providers Pre-GDPR Yes … Giesecke + Devrient GmbH …
17 July 2020
… that is essentially equivalent to the one guaranteed by the GDPR in light of the EU Charter. The assessment of whether … light of the non-exhaustive factors set out under Art 45(2) GDPR. If the result of this assessment is that the country … The EDPB recalls that it issued guidelines on Art 49 GDPR derogations (2); and that such derogations must be …
4 June 2020
… compliance of the related personal data processing with the GDPR. The Deputy Data Protection Ombudsman ordered the … failed to conduct the impact assessments required by the GDPR before the start of processing. Data protection impact … that the processing of audio data was not in line with the GDPR’s principle of data minimisation. She ordered Taksi …
29 July 2020
… 32 of the European General Data Protection Regulation, GDPR), the Department of Fines of the Baden-Wuerttemberg … with the LfDI. Within the frame that article 83 (4) GDPR sets for fines, the comprehensive internal reviews and … restore or improve the health of the insured persons. The GDPR requires fines to not only be effective and dissuasive, …
1 July 2018
… of the Group’s respective regular business activities. Pre-GDPR Yes … Norsk Hydro …
25 November 2020
… Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any … Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any …
18 August 2020
… that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any … that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any …
23 April 2024
… services. We also worked hard to raise awareness of the GDPR at the European and international level, so that … services. We also worked hard to raise awareness of the GDPR at the European and international level, so that …
1 July 2014
… of the Group’s respective regular business activities Pre-GDPR Yes … ATOS …
1 July 2014
… of the Group’s respective regular business activities Pre-GDPR Yes … ATOS …
3 October 2023
… of personal data pursuant to Article 6(1)(c) of the GDPR. However, the national legal regulation may form the basis for the processing under Article 6(1)(e) GDPR. IMY concluded that fires are serious and can pose a … of personal data pursuant to Article 6(1)(c) of the GDPR. However, the national legal regulation may form the …
25 September 2025
… Article 24 (1), 25 (1), 28 (1) 32 (1,2), and 33 (1) of the GDPR, as well as on Mayor of Aleksandów an administrative … 32 (1,2) in connection with Article 28 (3)(c,f) of the GDPR. For further information: • National press release: … Article 24 (1), 25 (1), 28 (1) 32 (1,2), and 33 (1) of the GDPR, as well as on Mayor of Aleksandów an administrative …