9 August 2019
… reference Article 6 (Lawfulness of processing) Keywords Data subject rights Lawfulness of processing Right to object … that took place between the CNIL's services and the data protection officer of your company in the framework of the … spam emails, unsolicited communication, rights of the data subjectSummary of the DecisionOrigin of the case The …
7 October 2021
… SA: Police reprimanded for illegal processing of personal data with facial recognition software 7 October 2021 Finland … Reference: Art. 14 in the Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining … Summary of the Decision Origin of the case The Deputy Data Protection Ombudsman has issued a statutory reprimand to the …
2 June 2020
… 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome Compliance … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.007.125 2 June 2020 GAIJIN … order Key words: Right to erasure, Identity verification, Data subject rightsSummary of the DecisionOrigin of the case …
3 August 2019
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where … correspondence, received 8 March 2019, with regard to the data protection complaint that has been raised with the ICO …
25 November 2020
… 25 November 2020 Poland The President of the Personal Data Protection Office, after having conducted ex officio proceedings relating to breach of personal data protection of persons subject to medical quarantine by … The President of the Personal Data Protection Office, after having conducted ex officio …
28 April 2020
… of processing) Article 15 (Right of access by the data subject) Keywords Consumer protection Right of access Outcome Reprimand Summary 61.6KB … reprimand your company for an infringement of the Gen- eral Data Protection Regulation (GDPR) when processing personal …
12 August 2019
… than six months, the controller had neither appointed a data protection officer nor published its contact details or reported those … than six months, the controller had neither appointed a data protection officer nor published its contact details or …
22 June 2019
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data breach Outcome No … complaint and I am of the view that has complied with its data protection obligations. You have explained that …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … fine Key words: Administrative fine, Anti-Money Laundering, Data security, Lawfulness of processing, Data subject rights, Data protection by design and by default Summary of the Decision …
3 August 2019
… Article 5 (Principles relating to processing of personal data) Keywords Accuracy Data subject rights E-Commerce Outcome No sanction Summary … email correspondence of 14 May 2019 with regard to the data protection complaint that has been raised with the ICO … Reference: Principles relating to processing of personal data (Article 5), Right to rectification (Article 16), Right …
12 November 2019
… Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where personal data have not been obtained from the data subject) Article … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Final Decision IMI Article 56 identification …
3 August 2019
… Article 5 (Principles relating to processing of personal data) Keywords Accuracy E-Commerce Outcome No sanction … email correspondence of 20 March 2019 with regard to the data protection complaint that has been raised with the ICO about … Reference: Principles relating to processing of personal data (Article 5), Right to rectification (Article 16), Right …
10 October 2019
… forgotten’)) Article 6 (Lawfulness of processing) Keywords Data retention Right to erasure Outcome No violation Summary … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.006.014 10 October 2019 Data … No infringement of the GDPR Key words: Right to erasure, Data retention, Legal claims, Compliance with a legal …
11 September 2020
… 11 September 2020 Poland The President of the Personal Data Protection Office, after having found a personal data … UODO stated that in the case concerned the Data Protection Officer (DPO) performed its tasks without having due regard … The President of the Personal Data Protection Office, after having found a personal data …
9 June 2021
… and of the thematic audit campaign on the role of the data protection officer (DPO). These decisions concern the adoption of … and of the thematic audit campaign on the role of the data protection officer (DPO). These decisions concern the …
20 July 2020
… authority 20 July 2020 The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on an … provide the President of the UODO with access to personal data and other information necessary for the performance of … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on …
15 June 2021
… of Oslo fined 15 June 2021 Norway The Norwegian Data Protection Authority has fined the Municipality of Oslo EUR … 400,000) for making documents containing sensitive personal data public. The case concerns an HR issue posted on eInnsyn … The Norwegian Data Protection Authority has fined the Municipality of Oslo …
30 June 2021
… Article 13 (Information to be provided where personal data are collected from the data subject) Article 37 (Designation of the data protection officer) Keywords Transparency Right to be informed Data …
5 March 2020
… a school 5 March 2020 Poland The President of the Personal Data Protection Office imposed a fine of PLN 20 000 in connection … with the breach consisting in the processing of biometric data of children when using the school canteen. The school … The President of the Personal Data Protection Office imposed a fine of PLN 20 000 in …