17 June 2025
… was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston …
26 April 2022
… Key Findings This case is an important reminder that the GDPR's requirement to provide information also applies when … Key Findings This case is an important reminder that the GDPR's requirement to provide information also applies when …
2 June 2022
… cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch … cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch …
13 July 2020
… breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The company hired a forensics firm to identify network … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The concerned data subjects were informed of the … incident occurred, e.g. encryption (Arti- cle 34 (3) (a) GDPR) - 3 - The stolen passwords were hashed with PBKDF2-SHA …
3 March 2022
… data subject (Article 34(1)) Decision: Infringement of the GDPR, administrative fine Key words: information … data subject (Article 34(1)) Decision: Infringement of the GDPR, administrative fine Key words: information …
10 March 2020
… violations of, inter alia, Art. 5(1)f and Art. 32 of the GDPR. When determining the fine, the SA referred to the … violations of, inter alia, Art. 5(1)f and Art. 32 of the GDPR. When determining the fine, the SA referred to the …
10 June 2021
… of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For … of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For …
25 November 2019
… provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) … provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) …
31 March 2022
… of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of … of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of …
24 May 2022
… of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 … of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 …
7 May 2025
… 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, … 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, …
6 February 2025
… in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an … in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an …
15 March 2022
… 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access … 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access …
8 February 2022
… for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic … for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic …
13 May 2021
… contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has … contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has …
15 May 2020
… requirements of the General Data Protection Regulation (GDPR) that personal data must be processed lawfully, fairly … requirements of the General Data Protection Regulation (GDPR) that personal data must be processed lawfully, fairly …
21 May 2025
… 6; Articles 5.1 (a), 12, 13, 5.1 (c), 24 and 25.1 of the GDPR. Additionally, the Italian SA reserves the right to … 6; Articles 5.1 (a), 12, 13, 5.1 (c), 24 and 25.1 of the GDPR. Additionally, the Italian SA reserves the right to …
6 January 2023
… of the processing of their personal data as required by the GDPR. For further information: press release: … of the processing of their personal data as required by the GDPR. For further information: press release: …
14 March 2024
… administrative fine, on the basis of on Article 83 (2) (a) GDPR, taking into account aggravating circumstances such as: … administrative fine, on the basis of on Article 83 (2) (a) GDPR, taking into account aggravating circumstances such as: …
30 April 2020
… The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s … The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s …