12 July 2019
… taken into consideration. Since the EDPB is required by the GDPR (art. 70(4)) to make the results of this consultation … such data, and repealing Directive 95/46/EC, (hereinafter “GDPR”), Having regard to the EEA Agreement and in particular … or even the risks of misuse. The general principles in GDPR (Article 5), should always be carefully considered when …
3 February 2022
… of processing (Article 6). Decision: Infringement of the GDPR, order to comply. Key words: … operations into compliance with the provisions of the GDPR within six months of this decision. For further … of processing (Article 6). Decision: Infringement of the GDPR, order to comply. Key words: …
28 March 2022
… Media Magazines B.V. Legal Reference: article 12 (2) GDPR Decision: Infringement of the GDPR, administrative fine Key words: identity document; … Media Magazines B.V. Legal Reference: article 12 (2) GDPR Decision: Infringement of the GDPR, administrative …
21 April 2022
… data pertaining to a special category of data under the GDPR (health data). The temperature checks were mainly based … of Mobility, which does not meet the criteria of the GDPR, i.e. to be a clear and precise legal standard whose … data pertaining to a special category of data under the GDPR (health data). The temperature checks were mainly based …
10 March 2021
… national authorities responsible for enforcement of the GDPR should be entrusted with the oversight of the privacy … the current ePrivacy Directive, and should complement the GDPR by providing additional strong guarantees for … national authorities responsible for enforcement of the GDPR should be entrusted with the oversight of the privacy …
14 October 2021
… obligations under data protection law (Article 12, 13 GDPR) through this procedure, as the customers were not … permissible at all. This is not explicitly regulated in the GDPR; there are no clear legal requirements in this respect. … obligations under data protection law (Article 12, 13 GDPR) through this procedure, as the customers were not …
1 July 2021
… established by the General Data Protection Regulation (GDPR). Furthermore, the enterprise had failed to fulfil its duty to provide information (Article 13 of the GDPR), its duty to delete the contents of the complainant’s … established by the General Data Protection Regulation (GDPR). Furthermore, the enterprise had failed to fulfil its …
13 May 2021
… fined Basaren Drift AS NOK EUR 20,000 (NOK 200,000) for a GDPR violation. The case relates to CCTV surveillance of … premises. The General Data Protection Regulation (GDPR) requires that all processing of personal data must … fined Basaren Drift AS NOK EUR 20,000 (NOK 200,000) for a GDPR violation. The case relates to CCTV surveillance of …
29 July 2020
… 32 of the European General Data Protection Regulation, GDPR), the Department of Fines of the Baden-Wuerttemberg … with the LfDI. Within the frame that article 83 (4) GDPR sets for fines, the comprehensive internal reviews and … restore or improve the health of the insured persons. The GDPR requires fines to not only be effective and dissuasive, …
24 February 2020
… documents: EDPB Contribution to the evaluation of the GDPR under Article 97 Guidelines on Articles 46 (2) (a) and … documents: EDPB Contribution to the evaluation of the GDPR under Article 97 Guidelines on Articles 46 (2) (a) and …
7 May 2025
… fine of 60 000 € for infringement of Article 38(3) of the GDPR and a fine of 72 000 € for infringement of Articles 30(1), 35(1,7) of the GDPR. Total amount of imposed fine on Toyota Bank Polska … fine of 60 000 € for infringement of Article 38(3) of the GDPR and a fine of 72 000 € for infringement of Articles …
14 February 2019
… taken into consideration. Since the EDPB is required by the GDPR (art. 70(4)) to make the results of this consultation … in accordance with the legal requirements provided by the GDPR and, where applicable, by national legislation. 2 SCOPE … of processing operations of controllers under the GDPR without specifying further the area of application …
2 September 2024
… the defendant has breached the articles 12.2, 12.3 et 15 GDPR because of the 14 month late reply and because the … sanction is based only on the infringement of article 15 GDPR, since both articles 12.2 et 12.3 were not in the … the defendant has breached the articles 12.2, 12.3 et 15 GDPR because of the 14 month late reply and because the …
12 February 2019
… the Austrian Post has violated several provisions of the GDPR. Specifically, the Austrian DPA is of the opinion that … data the Austrian DPA found this to be contradictory to the GDPR. Furthermore, the Austrian DPA found that the DPIA for … the Austrian Post has violated several provisions of the GDPR. Specifically, the Austrian DPA is of the opinion that …
26 November 2024
… wording of data access in accordance with Art. 15 GDPR and the processes for providing access in a timely … a legal basis, thus violating Art. 5.1(a) and 6(1) of the GDPR. Even though the originally processed data records were … wording of data access in accordance with Art. 15 GDPR and the processes for providing access in a timely …
20 January 2023
… Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to … without consent in accordance with Article 6(1)(a) of the GDPR. Estonian SA issued a precept with a penalty payment of … Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to …
22 November 2019
… Privacy Shield Guidelines on the Territorial Scope of the GDPR (version following public consultation) Guidelines on … Privacy Shield Guidelines on the Territorial Scope of the GDPR (version following public consultation) Guidelines on …
9 June 2020
… to NGOs on Hungarian government decrees Statement on Art 23 GDPR … During its 26th, 28th and 30th plenary session, the … to NGOs on Hungarian government decrees Statement on Art 23 GDPR … EDPB adopted documents - 26th, 28th and 30th plenary …
20 April 2023
… of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and … should be made compliant with the provisions of the GDPR within six months from the date of delivery of the … of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and …
13 May 2021
… Controller: Municipality of Bozen/Bolzano Legal Reference: GDPR: Article 5 para. 1, letters a) and c) (lawfulness, … private life). Decision: finding of infringements of the GDPR; administrative fine Key words: employer-employee … Controller: Municipality of Bozen/Bolzano Legal Reference: GDPR: Article 5 para. 1, letters a) and c) (lawfulness, …