Verhaltensregeln für Internet Service Provider / Code of Conduct for Internet Service Providers
- Scope
- National
- Type
- Code for Controllers/Processors subject to GDPR
- Code Owner
- Internet Service Providers Austria (ISPA) - Verband der österreichischen Internet-Anbieter
- Monitoring body
Aufsichtsbeirat der ISPA (internal monitoring body)
https://www.ispa.at/wissenspool/datenschutz/- Relevant topics
EDPBI:SE:OSS:D:2021:300
EDPBI:SE:OSS:D:2021:300
- CSA
-
-
de
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand
EDPBI:FR:OSS:D:2021:295
EDPBI:FR:OSS:D:2021:295
- CSA
-
-
de
-
dk
-
pt
-
at
-
it
-
nl
-
pl
-
es
-
se
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- No sanction
Bioclinica Group
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Suppliers
- Employees, suppliers, service providers and customers, including their contact persons
EDPBI:FR:OSS:D:2022:344
EDPBI:FR:OSS:D:2022:344
- CSA
-
-
be
-
de
-
ie
-
it
-
hu
-
es
-
se
-
- Main legal reference
- Article 44 (General principle for transfers)
- Article 46 (Transfers subject to appropriate safeguards)
- Relevant topics
- Outcome
- Compliance order
Thales SA
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
Marsh and McLennan Companies Inc.
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR
Go to
Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR
EDPBI:CY:OSS:D:2024:1426
EDPBI:CY:OSS:D:2024:1426
- CSA
-
-
de
-
nl
-
ee
-
fr
-
pl
-
be
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 24 (Responsibility of the controller)
- Relevant topics
- Outcome
- Administrative fine