Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs
Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security
se
EDPBI:EE:OSS:D:2026:4140
EDPBI:EE:OSS:D:2026:4140
- CSA
-
-
dk
-
ie
-
pl
-
es
-
se
-
DE/BE
-
DE SA (Hessen)
-
DE SA (Rhineland-Palatinate)
-
DE (Baden-Wüerttemberg)
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
EDPBI:PL:OSS:D:2026:4187
EDPBI:PL:OSS:D:2026:4187
- CSA
-
-
dk
-
it
-
se
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:PL:OSS:D:2026:4188
EDPBI:PL:OSS:D:2026:4188
- CSA
-
-
dk
-
it
-
se
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:EE:OSS:D:2026:4125
EDPBI:EE:OSS:D:2026:4125
- CSA
-
-
dk
-
ee
-
fi
-
de
-
ie
-
it
-
lu
-
pl
-
pt
-
es
-
se
-
no
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Relevant topics
- Outcome
- Reprimand
EDPBI:EE:OSS:D:2026:4013
EDPBI:EE:OSS:D:2026:4013
- CSA
-
-
pl
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- No sanction
EDPBI:IT:OSS:D:2026:4124
EDPBI:IT:OSS:D:2026:4124
- CSA
-
-
ee
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:EE:OSS:D:2026:3971
EDPBI:EE:OSS:D:2026:3971
- CSA
-
-
pl
- Main legal reference
- Article 24 (Responsibility of the controller)
- Article 25 (Data protection by design and by default)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand