13 September 2024
… 2024 Greece Background information Date of final decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and transparency; GDPR: Article 6.1.f: Processing based on legitimate … decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and …
20 July 2022
… case Controller: Clearview AI Inc. Legal Reference: GDPR: Article 3: Territorial scope. Article 5(1)(a) and (2): … not established in the Union. Decision: Infringement of the GDPR, Administrative fine. Key words: Web scraping, Images … 9 GDPR) and its obligations under Articles 12, 14, 15 and 27 of the GDPR. Decision: The Hellenic DPA imposed a fine …
26 April 2024
… of Reykjavík infringed multiple Articles of the GDPR with its use of Google’s educational system i.e.: … accordance with the Regulation (Articles 5, 24(1) & 28(1) GDPR) Data processing agreement did not meet the minimum … Furthermore, the Icelandic SA imposed a fine of app. EUR 13.270 (ISK 2,000,000) on the municipality of Reykjavík. For …
6 April 2022
… Ireland Group plc Legal Reference: Article 32(1), 33 and 34 GDPR Decision: Infringement of Article 32(1), 33 and 34 GDPR, Order to comply with article 32(1) GDPR, Issued … Protection Commission (DPC) between 9 November 2018 and 27 June 2019. The notifications related to the corruption of …
2 July 2019
… Decision nr 27 EDPBI:DEBE:OSS:D:2019:27 2 July 2019 LSA DE/BE CSA AT DE/HE DE/NW DE/RP DE/SL FR … access to his personal data in accordance with Article 15 GDPR. The controller attempted to provide the complainant … months after the deadline established under Article 12 (3) GDPR.Findings The LSA determined that the controller …
… The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … Data subjects may exercise their rights under the GDPR by contacting directly the competent national … in accordance with Article 42 (2) of Regulation (EU) 2018/1727 . The national Data Protection Authorities ('DPAs') of …
14 October 2020
… decision on an administrative fine of approximately EUR 276,000 (3 million NOK). Personal information in the … the final decision of an administrative fine of EUR 276,000, says Data Protection Authority Director-General … to Vigilo that those who process data have a duty under the GDPR to assist the municipality in ensuring compliance with …
12 May 2022
… on the calculation of administrative fines under the GDPR Guidelines 04/2022 on the calculation of administrative fines under the GDPR Start Date: 16 May 2022 End Date: 27 June 2022 Public consultation reference: 04/2022 … on the calculation of administrative fines under the GDPR …
3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, …
25 May 2023
… Chair Andrea Jelinek. She was elected with 19 votes out of 27, in two rounds. Anu Talus is the head of the Finnish Data … the newly adopted EU digital legislation overlaps with the GDPR. Going forward, it is crucial to ensure that the legal … foundations to build upon. In the past five years, the GDPR has become a global landmark as the world’s most …
23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
5 August 2020
… 631.183.3 Berlin, 5 August 2020 535.1479 A56ID 109234 CR 129278 DD 129284 FD 142719 Final Decision 1. Facts concerning … breach or to mitigate its adverse effects (Art. 33 (3) (d) GDPR) Both the document and the entry were deleted. … or public communi- cation (Art. 34(1) or Art. 34(3) (c) GDPR) The data subjects concerned were informed in writing …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
8 December 2020
… Opinion 27/2020 on the draft decision of the Danish Supervisory … Adopted Opinion 27/2020 on the draft decision of the Danish Supervisory … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the European Economic Area … the “EDPB”) is to ensure the consistent application of the GDPR throughout the EEA. To this effect, it follows from …
27 June 2022
… The CNPD adopts the certification mechanism GDPR-CARPA 27 June 2022 Luxembourg Luxembourg becomes the first country … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission …
15 July 2025
… 2025 Italy Background information Date of final decision: 27 March 2025 National case Controller: Istituto di … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … had been made public on the municipality’s website on 27 September 2021, by a reporter from Romerikes Blad . The …
20 December 2019
… Office (ICO) has fined a London-based pharmacy £275,000 for failing to ensure the security of special … an infringement of the General Data Protection Regulations (GDPR). The ICO launched its investigation into Doorstep … considered the contravention from 25 May 2018, when the GDPR came into effect. Doorstep Dispensaree has also been …
26 November 2021
… of processing (Article 32). Decision: Infringement of the GDPR, Fine Key words: Principles, Lawfulness of processing, … on its own initiative whether the project complied with the GDPR. Key findings In its decision, the Icelandic DPA notes … and the company YAY ehf. was fined 4 million ISK (approx. 27.100 Euros). For further information: Icelandic DPA issues …
27 September 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 State Current 2019 No 6441827 November 2019 Decision concerning list of types of …