… and the EDPB on the interplay between the DMA and the GDPR For any queries, including on older versions of privacy … and the EDPB on the interplay between the DMA and the GDPR For any queries, including on older versions of privacy …
24 February 2022
… to data subjects under Article 12(1) and Article 13 of the GDPR; data minimisation under Article 5(1)(c); legal basis … under Article 6(1) Decision: finding an infringement of the GDPR, order to bring practices into line with the GDPR, data protection fine of HUF 5 million (approx. EUR 14 …
20 January 2023
… Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to … without consent in accordance with Article 6(1)(a) of the GDPR. Estonian SA issued a precept with a penalty payment of … Legal Reference: Lawfulness of processing (Article 6(1) GDPR) Decision: Precept, Order to …
13 May 2021
… Controller: Municipality of Bozen/Bolzano Legal Reference: GDPR: Article 5 para. 1, letters a) and c) (lawfulness, … private life). Decision: finding of infringements of the GDPR; administrative fine Key words: employer-employee … Controller: Municipality of Bozen/Bolzano Legal Reference: GDPR: Article 5 para. 1, letters a) and c) (lawfulness, …
25 September 2025
… fine for an infringement of Article 58 (1)(a) and (e) GDPR. The entrepreneur was informed of the opening of the … fine of EUR 4 500 for infringement of Article 58 (1)(a,e) GDPR. For further information: • National press release: … fine for an infringement of Article 58 (1)(a) and (e) GDPR. The entrepreneur was informed of the opening of the …
3 September 2019
… Final Decision Art 60 Complaint No infringement of the GDPR Background information Date of final decision: 3 … of access (Article 15) Decision: No infringement of the GDPR Key words: Right of access, Transparency and … the controller had complied with his obligations under the GDPR. 2 Furthermore, the LSA was informed by the SA …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of …
19 April 2023
… to comply with the requirements of Chapter V of the GDPR, and if necessary, to stop the transfer at stake. The … to comply with the requirements of Chapter V of the GDPR, and if necessary, to stop the transfer at stake. The …
5 January 2022
… Accountability (Art. 5(2)) Decision: Infringement of the GDPR, administrative fine and reprimand Key words: personal … Ombudsman issued Vastaamo a reprimand on violating the GDPR. The sanctions board of the Office of the Data … Accountability (Art. 5(2)) Decision: Infringement of the GDPR, administrative fine and reprimand Key words: personal …
12 February 2021
… have been breached: Violation of Article 32 (1) of the GDPR, by failing to implement appropriate technical and … appropriate to the risk. Violation of Article 33 of the GDPR, by failing to notify the personal data breach to the … have been breached: Violation of Article 32 (1) of the GDPR, by failing to implement appropriate technical and …
20 April 2023
… of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and … should be made compliant with the provisions of the GDPR within six months from the date of delivery of the … of the Bar Association for breaching the provisions of the GDPR by failing to implement appropriate technical and …
3 October 2023
… of personal data pursuant to Article 6(1)(c) of the GDPR. However, the national legal regulation may form the basis for the processing under Article 6(1)(e) GDPR. IMY concluded that fires are serious and can pose a … of personal data pursuant to Article 6(1)(c) of the GDPR. However, the national legal regulation may form the …
2 May 2025
… Article 6(1), 9(1) in relation with Article 13(1,2) of the GDPR and a fine of 105 000 € for infringement of Articles 24(1), 25(1,) and 32(1,2) of the GDPR. Total amount of imposed fine on Centrum Medyczne … Article 6(1), 9(1) in relation with Article 13(1,2) of the GDPR and a fine of 105 000 € for infringement of Articles …
6 February 2025
… data in compliance with the principles expressed in the GDPR. Losing a laptop is losing a laptop represents an … ZHP for infringement of Articles 5, 24, 25 and 32 of the GDPR. Chorągiew was ordered to implement appropriate data … data in compliance with the principles expressed in the GDPR. Losing a laptop is losing a laptop represents an …
25 September 2025
… Article 24 (1), 25 (1), 28 (1) 32 (1,2), and 33 (1) of the GDPR, as well as on Mayor of Aleksandów an administrative … 32 (1,2) in connection with Article 28 (3)(c,f) of the GDPR. For further information: • National press release: … Article 24 (1), 25 (1), 28 (1) 32 (1,2), and 33 (1) of the GDPR, as well as on Mayor of Aleksandów an administrative …
… and processors List of documents assessed by the EDPB GDPR Certification Standard and Criteria, BC 5701:2024, … as European Data Protection Seal pursuant to Article 42.5 (GDPR) 2 December 2024 Publication Type: Opinion of the Board …
15 October 2024
… stakeholders in the context of a request for an Art. 64(2) GDPR opinion relating to artificial intelligence models (‘AI … stakeholders in the context of a request for an Art. 64(2) GDPR opinion relating to artificial intelligence models (‘AI …
1 June 2020
… of a certification body pursuant to Article 43.3 (GDPR) … 1 DPC ADDITIONAL ACCREDITATION REQUIREMENTS FOR … 17065) and in accordance with Articles 43(1)(b) and 43(3) GDPR. The points below (aside from section 9) refer to ISO … and operational procedures in relation to accreditation for GDPR certification schemes. 1 SCOPE This document contains …
17 July 2020
… that is essentially equivalent to the one guaranteed by the GDPR in light of the EU Charter. The assessment of whether … light of the non-exhaustive factors set out under Art 45(2) GDPR. If the result of this assessment is that the country … The EDPB recalls that it issued guidelines on Art 49 GDPR derogations (2); and that such derogations must be …
4 June 2020
… compliance of the related personal data processing with the GDPR. The Deputy Data Protection Ombudsman ordered the … failed to conduct the impact assessments required by the GDPR before the start of processing. Data protection impact … that the processing of audio data was not in line with the GDPR’s principle of data minimisation. She ordered Taksi …