Hungarian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
EDPBI:FR:OSS:D:2021:310
EDPBI:FR:OSS:D:2021:310
- CSA
-
-
be
-
de
-
lu
-
it
-
nl
-
es
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 28 (Processor)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Administrative fine
EDPBI:IE:OSS:D:2022:556
EDPBI:IE:OSS:D:2022:556
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
es
-
se
-
no
-
li
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 21 (Right to object)
- Article 22 (Automated individual decision-making, including profiling)
- Relevant topics
- Outcome
- Amicable settlement
EDPBI:FR:OSS:D:2022:344
EDPBI:FR:OSS:D:2022:344
- CSA
-
-
be
-
de
-
ie
-
it
-
hu
-
es
-
se
-
- Main legal reference
- Article 44 (General principle for transfers)
- Article 46 (Transfers subject to appropriate safeguards)
- Relevant topics
- Outcome
- Compliance order
EDPBI:FR:OSS:D:2021:295
EDPBI:FR:OSS:D:2021:295
- CSA
-
-
de
-
dk
-
pt
-
at
-
it
-
nl
-
pl
-
es
-
se
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- No sanction
EDPBI:SE:OSS:D:2021:300
EDPBI:SE:OSS:D:2021:300
- CSA
-
-
de
-
- Main legal reference
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand
EDPBI:LU:OSS:D:2023:1004
EDPBI:LU:OSS:D:2023:1004
- CSA
-
-
de
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:SE:OSS:D:2022:432
EDPBI:SE:OSS:D:2022:432
- CSA
-
-
de
-
dk
-
at
-
it
-
pl
-
fi
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
Opinion 34/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Otis
Go to
Opinion 34/2021 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules of Otis
EDPBI:IE:OSS:D:2025:3409
EDPBI:IE:OSS:D:2025:3409
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
ie
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 18 (Right to restriction of processing)
- Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing)
- Article 20 (Right to data portability)
- Article 21 (Right to object)
- Article 22 (Automated individual decision-making, including profiling)
- Relevant topics
- Outcome
- Amicable settlement