1 July 2016
… of the Group’s respective regular business activities. Pre-GDPR Yes … Merck & Co., Inc. (MSD) …
1 July 2011
… of the Group’s respective regular business activities Pre-GDPR Yes … Fiserv, Inc. (First Data Corporation) …
1 July 2011
… of the Group’s respective regular business activities Pre-GDPR Yes … Fiserv, Inc. (First Data Corporation) …
1 July 2012
… of the Group’s respective regular business activities Pre-GDPR Yes … ABN AMRO Group N.V. …
31 May 2022
… on the calculation of administrative fines under the GDPR 12 May 2022 Publication Type: Guidelines Topics: … of the Second Payment Services Directive (PSD2) and GDPR 30 May 2022 Publication Type: Letters Topics: Financial …
17 March 2022
… (Art. 32(1) and Art. 32(2)). Decision: infringement of the GDPR, administrative fine. Key words: responsibility of the … The Polish DPA found that the controller infringed the GDPR provisions i.e. Art. 5(1)(f), Art. 24(1), Art. 25(1), … (Art. 32(1) and Art. 32(2)). Decision: infringement of the GDPR, administrative fine. Key words: responsibility of the …
16 May 2022
… safeguards (Article 46). Decision: infringement of the GDPR, order to suspend processing and erasure of personal … of Reykjavík had breached various provisions of the GDPR using Seesaw. Following that decision, the Icelandic SA … safeguards (Article 46). Decision: infringement of the GDPR, order to suspend processing and erasure of personal …
25 September 2025
… infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR. In addition, the President of the Personal Data … the processing operations into line with the provisions of GDPR by: implementing appropriate technical and … infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR. In addition, the President of the Personal Data …
1 July 2015
… of the Group’s respective regular business activities Pre-GDPR Yes … Simon-Kucher & Partners …
1 July 2013
… of the Group’s respective regular business activities. Pre-GDPR Yes … ARDIAN(previously known as AXA PRIVATE EQUITY) …
1 July 2017
… of the Group’s respective regular business activities. Pre-GDPR Yes … Marsh and McLennan Companies Inc. …
1 July 2017
… of the Group’s respective regular business activities. Pre-GDPR Yes … Marsh and McLennan Companies Inc. …
17 December 2021
… Legal basis (Article 6) Decision: Infringement of the GDPR, Order to establish procedures Key words: Credit Rating … Legal basis (Article 6) Decision: Infringement of the GDPR, Order to establish procedures Key words: Credit Rating …
3 October 2022
… 32) Decision: in accordance with the GDPR Key words: sensitive data, health records, research … 32) Decision: in accordance with the GDPR Key words: sensitive data, health records, research …
4 March 2022
… of personal data (Art. 5) Decision: Infringement of the GDPR and fine imposed Key words: Information Security, … of personal data (Art. 5) Decision: Infringement of the GDPR and fine imposed Key words: Information Security, …
19 January 2022
… to support controllers to answer access requests in a GDPR compliant manner.” The Guidelines will be subject to … to support controllers to answer access requests in a GDPR compliant manner.” The Guidelines will be subject to …
18 August 2020
… to processing for marketing purposes under Article 21 GDPR. However, the company did not comply with its … to processing for marketing purposes under Article 21 GDPR. However, the company did not comply with its …
11 October 2024
… on issues relating to the request for an Art. 64(2) GDPR opinion on artificial intelligence ("AI") submitted to … on issues relating to the request for an Art. 64(2) GDPR opinion on artificial intelligence ("AI") submitted to …
16 May 2019
… the relevant data breach as required by Art. 33 of the GDPR without providing a sufficient explanation of that …
11 January 2021
… not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative … DPA reminds that pursuant to Article 33 (1) and (3) of the GDPR, in the case of a personal data breach, the controller … not complied with the obligation under Article 33 of the GDPR. When determining the amount of the administrative …