30 November 2022
… (1) (a) GDPR (Principles relating to processing of personal data), Article 9 (1) and (2) GDPR (Processing of special categories of personal data), Article 58 (2) (d) and (i) GDPR, Article 83 (1-3) … indicating that controllers may have infringed data protection provisions. The SA in the first instance …
1 July 2025
… Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … Education and Training Board (CDETB) | 23/06/2025 | Data Protection Commission The news published here does not …
15 January 2024
… Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication … and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where … 32 of the GDPR) And one breach to the French Data Protection Act: a failure to comply with obligations …
15 October 2020
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where … / penalty imposed 40.000 € and requirement of adaptation to data protection regulations 1054-0319 Summary of the …
12 February 2019
… Monitoring Bodies under Regulation 2016/679 The European Data Protection Board welcomes comments on the Guidelines 1/2019 … on the EDPB website. If your submission contains personal data, they will also be disclosed on the EDPB website, … e 4 Adopted - Version for public consultation The European Data Protection Board Having regard to Article 70(1)(n) and …
16 May 2022
… order as meant in article 58(2) point d. Key words: rights data subjects, information to be provided, technical and … per year for the past three years. The personal data in all these applications is not sufficiently … large-scale, serious infringements of the General Data Protection Regulation (GDPR) in its visa-issuing process. In …
4 October 2022
… in private sector Legal Reference: National Law (Personal Data Protection Act), Article 5.1(c) and 6.1(f) of the GDPR … tracking Summary of the Decision Origin of the case The data controller introduced GPS tracking of seven company … in private sector Legal Reference: National Law (Personal Data Protection Act), Article 5.1(c) and 6.1(f) of the GDPR …
19 December 2022
… of fine of 4.3 million EUR Key words: special categories of data; international data transfers; public body; DPIA; transparency obligations; … of processing; adequate safeguards; equivalent level of protection; fines Summary of the Decision Origin of the … of fine of 4.3 million EUR Key words: special categories of data; international data transfers; public body; DPIA; …
31 May 2023
… fine, Cooperation, Employment, Notification of personal data breach Summary of the Decision Origin of the case … This documentation contained, inter alia, personal data of the controller's employees and persons who were … measures that would ensure an adequate level of data protection. In the present case, the cooperation with the …
6 July 2023
… and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject) Decision: Administrative fine, Reprimand Key … individuals who had asked for them in accordance with data protection legislation. The Finnish SA finds that the …
20 September 2022
… ordered the controller to grant the access request by the data subject Key words: processing of data in the employment sector, right of access to one’s … of the GDPR and are intended to afford safeguards and protection in ways that are not fully superimposable. The …
16 May 2022
… fines Key words: illegally processing personal data in ‘fraud identification facility’, access control, … Authority (SA) uncovered numerous violations of the General Data Protection Regulation (GDPR). For example, the Tax … fines Key words: illegally processing personal data in ‘fraud identification facility’, access control, …
7 January 2019
… following EDPB opinion 04/2019 for the transfer of personal data between each of the European Economic Area (“EEA”) … administrative arrangement for the transfer of personal data between Each of the European Economic Area (“EEA”) … data between them, recognizing the importance of the protection of personal data and of having robust data …
1 December 2022
… 14 of the GDPR) obligation to ensure security of personal data (Article 32 of the GDPR) Decision: administrative fine … and 14 of the GDPR) Failure to ensure security of personal data (Article 32 of the GDPR) Decision Based on findings … with its obligations provided for by the General Data Protection Regulation (GDPR) and the French Postal and …
11 November 2020
… transfer tools to ensure compliance with the EU level of protection of personal data Start Date: 11 November 2020 End Date: 21 December 2020 … Type: Recommendations Topics: International Transfers of Data The European Data Protection Board welcomes comments on …
16 May 2022
… Lawfulness of processing (Art 6), Right of access by the data subject (Art. 15) Decision: Infringement of the GDPR … Further, credit ratings in cases like this collect personal data from a third party. According to Article 15 of the General Data Protection Regulation, a data subject has the right to …
20 July 2022
… and (2): Principles relating to processing of personal data. Article 6 (1)(a)(b)(c)(d)(e)(f): Lawfulness of … and 9(2)(e): Processing of special categories of personal data. Article 12: Transparent information, communication and … be examined on the whole from the point of view of the protection of personal data. Key Findings: The Authority …
17 July 2025
… Article 9 (Processing of special categories of personal data), Article 83 (General conditions for imposing … fines) Decision: Administrative fine Key words: Personal data breach, Sensitive data, Administrative fine, Data … as health data which is subject to a strong legal protection under the GDPR. Decision Swedish SA concludes …
21 March 2023
… imposed on Suomen Asiakastieto for non-compliance with the Data Protection Ombudsman's order The news published here does … imposed on Suomen Asiakastieto for non-compliance with the Data Protection Ombudsman's order …
15 July 2025
… 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 88 … legislation. The Italian SA also reiterated that personal data present on social networks, or in any case accessible … 88 of the Regulation and Article 113 of the Italian data protection Code and ordered the company to pay the sum of …