16 May 2019
… be established.Comments The LSA initiated an Article 56 GDPR proceeding for the booking website. …
17 June 2019
… processing (Article 32) Decision: No violation of art. 32 GDPR and recommendation on the adoption of technical …
29 January 2019
… complaint, despite the obligation provided in Article 12.3 GDPR, according to which the controller shall inform the …
23 September 2021
… Article 32 (1) and (2) Decision: Infringement of the GDPR, administrative fine Key words: Security of processing, … Article 32 (1) and (2) Decision: Infringement of the GDPR, administrative fine Key words: Security of processing, …
11 September 2019
… to erasure (Article 17) Decision: No infringement of the GDPR Key words: Lawfulness of the processing, Right to …
17 May 2019
… subject, thus violating its obligations under Article 12.3 GDPR. The LSA considers that the deadline to answer the …
2 August 2019
… Reference: Articles 6 (Lawfulness of processing) and 13 GDPR (Information to be provided to the data subject) …
15 July 2025
… Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of …
18 November 2025
… the recordings, but by then the 30-day deadline set by the GDPR had already passed. Key Findings During the … the recordings, but by then the 30-day deadline set by the GDPR had already passed. Key Findings During the …
3 August 2019
… that the controller complied with its obligations under the GDPR. …
2 July 2019
… the personal data breach provided by Article 33 of GDPR. The General Regulation on Data Protection establishes, … and updated where necessary.” Moreover, Recital (75) of GDPR states that: “The risk to the rights and freedoms of … the personal data breach provided by Article 33 of GDPR. The General Regulation on Data Protection establishes, …
13 December 2021
… Legal basis (Article 6) Decision: Infringement of the GDPR declared and fine imposed, order to establish … Legal basis (Article 6) Decision: Infringement of the GDPR declared and fine imposed, order to establish …
6 February 2025
… Kutno for infringement of Articles 5, 24, 25, 28, 32 of the GDPR. An unencrypted pendrive with the personal data of … programme, for infringement of Articles 28 and 32 of the GDPR. For further information: decision in national language … Kutno for infringement of Articles 5, 24, 25, 28, 32 of the GDPR. An unencrypted pendrive with the personal data of …
14 April 2025
… of the Nokia Group SA Decision 167KB English Download Pre-GDPR No …
24 July 2024
… AVATURE Group ES SA decision 281.7KB English Download Pre-GDPR No …
17 April 2023
… aligns the text of the Guidelines with the text of the GDPR, which does not provide for one-stop-shop for … aligns the text of the Guidelines with the text of the GDPR, which does not provide for one-stop-shop for …
13 May 2021
… in addition to the requirement for legal basis under the GDPR. Nor had the business drawn up procedures for access to … in addition to the requirement for legal basis under the GDPR. Nor had the business drawn up procedures for access to …
15 July 2025
… The DO has violated the general data protection regulation (GDPR) by not having taken sufficiently effective security … The DO has violated the general data protection regulation (GDPR) by not having taken sufficiently effective security …
8 February 2022
… of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria 8 February 2022 …
3 June 2021
… France Type Code for Controllers/Processors subject to GDPR Scope Transnational Opinion/Guideline References … 2021_cispe_cloud_iaas_data_protection_code_of_conduct_-_gdpr_compliance.pdf 1.4MB Download file 1 …