11 September 2019
… to erasure (Article 17) Decision: No infringement of the GDPR Key words: Lawfulness of the processing, Right to …
17 May 2019
… subject, thus violating its obligations under Article 12.3 GDPR. The LSA considers that the deadline to answer the …
2 August 2019
… Reference: Articles 6 (Lawfulness of processing) and 13 GDPR (Information to be provided to the data subject) …
7 July 2022
… the controller (Article 24) Decision: Infringement of the GDPR, Order to comply Key words: Cyber attack, Ransomware, … the controller (Article 24) Decision: Infringement of the GDPR, Order to comply Key words: Cyber attack, Ransomware, …
24 May 2022
… right of access (Article 15) Decision: infringement of the GDPR, fine 1.5 million ISK (approx. 10.700 Euros). Key … right of access (Article 15) Decision: infringement of the GDPR, fine 1.5 million ISK (approx. 10.700 Euros). Key …
20 December 2022
… that the processing of personal data complies with the GDPR. Key Findings Failure to verify the processor and its … that the processing of personal data complies with the GDPR. Key Findings Failure to verify the processor and its …
20 December 2022
… documentation since the beginning of the application of the GDPR and had performed a risk assessment. The controller was … documentation since the beginning of the application of the GDPR and had performed a risk assessment. The controller was …
27 July 2022
… the application of the General Data Protection Regulation (GDPR) and so proactively address potential threats to … the application of the General Data Protection Regulation (GDPR) and so proactively address potential threats to …
4 September 2023
… the client's right of access to data as required by the GDPR. In the decision, particular attention was paid to the … the client's right of access to data as required by the GDPR. In the decision, particular attention was paid to the …
6 July 2023
… method of delivering call recordings in accordance with the GDPR. Neither did the company inform the Finnish SA of … method of delivering call recordings in accordance with the GDPR. Neither did the company inform the Finnish SA of …
11 August 2020
… Germany Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body TIGGES DCO GmbH …
6 May 2022
… Groupon International Limited 165.2KB English Download Pre-GDPR No … Groupon International Limited …
9 January 2024
… Travel Group Final decision 2.7MB English Download Pre-GDPR No … American Express Global Business Travel (Amex GBT) …
19 April 2022
… Netherlands Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body Vereniging Netbeheer …
2 December 2024
… of the Infosys Group National Decision 402.5KB Download Pre-GDPR No … Infosys Group …
2 December 2024
… of the Infosys Group National Decision 339.2KB Download Pre-GDPR No … Infosys Group …
15 February 2024
… Cerner Group Cerner decision 383.3KB English Download Pre-GDPR No … Cerner …
15 February 2024
… the Cerner Group Cerner BCR-P 390.3KB English Download Pre-GDPR No … Cerner …
27 May 2020
… had not made the impact assessment required by the GDPR before starting to process the location data. The … controller’s documentation related to compliance with the GDPR. The company had asked for information on matters such … had not made the impact assessment required by the GDPR before starting to process the location data. The …
11 September 2020
… of confidentiality and accountability specified in the GDPR. It is worth noting that the personal data of … of the principle of storage limitation provided for in the GDPR. Moreover, in the course of the conducted proceedings … of confidentiality and accountability specified in the GDPR. It is worth noting that the personal data of …