25 November 2020
… a fine of 1,500 EUR for unlawful processing of personal data made via a video surveillance system. The positioning … this video system also constituted an infringement of the data protection by design principle, the DPA concluded. The … a fine of 1,500 EUR for unlawful processing of personal data made via a video surveillance system. The positioning …
8 February 2022
… Reference: Principles relating to processing of personal data (Article 5); Lawfulness of processing (Article 6); … and modalities for the exercise of the rights of the data subject (Article 12); Information to be provided where … 21); Accountability of the controller (Article 24); Data protection by design and by default (Article 25); Imposition …
4 September 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data breach Phishing emails … The Berlin DPA closes the case. 1. Facts concerning the data breach - Controller: Apassionata World GmbH - Incident: …
… . The main objective of this programme is to help European Data Protection Authorities (DPAs) increase their capacity to … AI Auditing by Dr. Gemma GALDON CLAVELL Data Protection Officer training by Dr. Tihomir Katulić AI Risks: Optical … . The main objective of this programme is to help European Data Protection Authorities (DPAs) increase their capacity …
31 March 2022
… risks and increase security in the processing of personal data of affected persons. The data that is processed to issue a duplicate SIM card and the … personal data, and their treatment must be subject to data protection regulations. It has been verified that the …
12 March 2024
… Failure of an airline company to inform the data subject of completion of erasure request, failure of … Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … activities in relation to the exercise of her data protection rights. For the infringement described above, …
23 January 2025
… spite of user consent withdrawal (Article 82 of the French Data Protection Act) Decision: Infringement of the French Post … Electronic Communications Code, Infringement of the French Data Protection Act, Administrative fine Key words: … spite of user consent withdrawal (Article 82 of the French Data Protection Act) Decision: Infringement of the French …
9 June 2023
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
6 April 2022
… imposed administrative fines on BOI of €463,000 Key words: Data Breach Summary of the Decision Origin of the case This inquiry was commenced in respect of 22 personal data breach notifications that Bank of Ireland Group plc (BOI) made to the Data Protection Commission (DPC) between 9 November 2018 and 27 …
19 July 2022
… of Google Chromebooks in Elsinore Municipality, the Danish Data Protection Agency expresses serious criticism and bans … and the use of Google Workspace. Key Findings: The Danish Data Protection Agency made a decision in September 2021 … of Google Chromebooks in Elsinore Municipality, the Danish Data Protection Agency expresses serious criticism and bans …
5 July 2021
… will have to amend the way it processes its riders’ data through a digital platform and verify that the … an initial set of inspections on the handling of employees’ data by the main food delivery companies in Italy. The … company, and led to finding several infringements of data protection legislation, the Italian law on employer-employee …
16 May 2022
… Controller: The municipality of Reykjavík. Legal Reference: data protection principles (Article 5), lawfulness of processing (Article 6), transparency (Article 13), data protection by design and default (Article 25), joint … Controller: The municipality of Reykjavík. Legal Reference: data protection principles (Article 5), lawfulness of …
27 June 2022
… mechanism according to the GDPR criteria. The National Data Protection Commission (CNPD) has adopted its certification … a national and international level under the GDPR (General Data Protection Regulation). A launching conference will … mechanism according to the GDPR criteria. The National Data Protection Commission (CNPD) has adopted its …
26 January 2023
… SA adopted a decision on the processing of personal data for the purpose of direct marketing 26 January 2023 … and transparency (Art. 5(1)(a) of GDPR), consent of the data subject (Art. 7(2) of GDPR), direct marketing (Art. … Summary of the Decision Origin of the case The State Data Protection Inspectorate (hereinafter - the Inspectorate) …
1 February 2020
… to light a number of severe infringements of personal data protection legislation. TIM were proven to be insufficiently … call centre operators relied upon by TIM had contacted the data subjects in the absence of whatever consent. In one … to light a number of severe infringements of personal data protection legislation. TIM were proven to be …
2 May 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 83 … administrative fine Key words: administrative fine, data subject rights, Principles relating to processing of … the the Polish SA's President of the Personal Data Protection Office established that, without a legal basis, …
8 June 2023
… 5 (1)(e)(Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing), Article 33 … infringements of the GDPR and a breach of the French Data Protection Act by KG COM: Failure to minimise the personal …
4 November 2024
… Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: Lawfulness … breach of the requirements for a legal basis in the General Data Protection Regulation. Key findings The Norwegian SA’s … Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: Lawfulness …
22 January 2024
… lack of transparency and unlawful processing of personal data collected indirectly 22 January 2024 Belgium Background … Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 30 (Records of …
26 April 2024
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 28 … Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 …