20 July 2022
… case Controller: Clearview AI Inc. Legal Reference: GDPR: Article 3: Territorial scope. Article 5(1)(a) and (2): … not established in the Union. Decision: Infringement of the GDPR, Administrative fine. Key words: Web scraping, Images … 9 GDPR) and its obligations under Articles 12, 14, 15 and 27 of the GDPR. Decision: The Hellenic DPA imposed a fine …
13 September 2024
… 2024 Greece Background information Date of final decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and transparency; GDPR: Article 6.1.f: Processing based on legitimate … decision: 27 May 2024 National case Legal Reference (s): GDPR: Article 5.1.a: Principle of lawfulness, fairness and …
6 April 2022
… Ireland Group plc Legal Reference: Article 32(1), 33 and 34 GDPR Decision: Infringement of Article 32(1), 33 and 34 GDPR, Order to comply with article 32(1) GDPR, Issued … Protection Commission (DPC) between 9 November 2018 and 27 June 2019. The notifications related to the corruption of …
12 May 2022
… on the calculation of administrative fines under the GDPR Guidelines 04/2022 on the calculation of administrative fines under the GDPR Start Date: 16 May 2022 End Date: 27 June 2022 Public consultation reference: 04/2022 … on the calculation of administrative fines under the GDPR …
27 October 2023
… rigward Meta Platforms Ireland Ltd (l-Artikolu66(2) tal-GDPR) 27 October 2023 Urgent Binding decision of the Board (Art. … rigward Meta Platforms Ireland Ltd (l-Artikolu66(2) tal-GDPR) …
25 June 2019
… 2016/679 Of The European Parliament And OF The Council of 27 April 2016 on the protection of natural persons with … “There are no prescriptive requirements to be found in the GDPR on how to authenticate the data subject. (…) … data or more generally exercising the rights granted by the GDPR. These procedures often already exist. The data …
15 July 2025
… 2025 Italy Background information Date of final decision: 27 March 2025 National case Controller: Istituto di … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of …
3 December 2024
… (EDPB) ippubblika linji gwida dwar l-Artikolu 48 tal-GDPR dwar it-trasferimenti tad-data lil awtoritajiet ta’ … mar-Regolament Ġenerali dwar il-Protezzjoni tad-Data (GDPR). Fil-linji gwida tiegħu, l-EDPB jiffoka fuq l-Artikolu … gwida huma soġġetti għal konsultazzjoni pubblika sas-27 ta’ Jannar 2025. Approvazzjoni tas-Siġill tal-UE …
27 September 2021
… l-abbozz ta’ Deċiżjoni dwar l-Adegwatezza tal-Korea t’Isfel 27 September 2021 EDPB Brussell, 27 ta’ Settembru - L-EDPB … tal-Korea. L-EDPB iffoka fuq aspetti ġenerali tal-GDPR u l-aċċess mill-awtoritajiet pubbliċi għad- data … tad- data essenzjalment ekwivalenti għal dak tal-GDPR. Bħal, pereżempju, l-adozzjoni ta’ notifiki …
3 June 2020
… has the following reference number: INC000002310272. 1. Decision Following a review of the case, the Danish … Article 32(1) of the General Data Protection Regulation (GDPR). The reprimand is issued in accordance with the rules … personal data. According to Article 5(1)(f) of the GDPR, personal data must be processed confidentially, such …
3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, …
27 September 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 State Current 2019 No 6441827 November 2019 Decision concerning list of types of …
10 October 2019
… (registered internally with file number CDP/IMI/LSA/27/2018) received from the Berlin Commissioner for Data … enshrined under the General Data Protection Regulation 1 ("GDPR" or the "Regulation"). The complainant contended that … this Office is not in line with what is expected under the GDPR. The submissions included the following principal …
23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
… The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … Data subjects may exercise their rights under the GDPR by contacting directly the competent national … in accordance with Article 42 (2) of Regulation (EU) 2018/1727 . The national Data Protection Authorities ('DPAs') of …
13 July 2020
… 13 July 2020 631.87 535.699 A56ID 74975 CR 82038 RD 129527 FD 135778 Final Decision The Berlin DPA closes the case. … breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The company hired a forensics firm to identify network … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The concerned data subjects were informed of the …
21 December 2018
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … Download Opinion / Binding decision References Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
20 May 2025
… Slovenia Background information Date of final decision: 27 February 2025 National case Controller: High school Legal … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper …
27 June 2022
… The CNPD adopts the certification mechanism GDPR-CARPA 27 June 2022 Luxembourg Luxembourg becomes the first country … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission … to introduce a certification mechanism according to the GDPR criteria. The National Data Protection Commission …