19 January 2024
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be … activities in relation to the exercise of her data protection rights. For the infringement described above, …
15 October 2020
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where … imposed 40.000 € and requirement of adaptation to data protection regulations 1054-0319 Summary of the complaint … line 639610479 in which a person pretended to be a police officer, which took place on 09/01 / 2018. For this reason, …
11 January 2024
… Article 9 (Processing of special categories of personal data), Article 16 (Right to rectification), Article 21 … order, Erasure order Key words: Right to erasure, Sensitive data, Exercise of data subject rights, Lawfulness of … party then lodged a complaint with the Belgian Data Protection Authority. Key Findings The Church's legal …
15 March 2022
… Norwegian SA have concluded that, pursuant to the General Data Protection Regulation , the employer had no legal basis for … in violation of the rules concerning notification of the data subject and the obligation to consider the employee’s …
13 December 2021
… A credit rating is the result of a compilation of personal data from many different sources and shows the likelihood of … on loans, mortgages and debt-to-income ratio. The General Data Protection Regulation requires all processing of personal …
30 November 2022
… (1) (a) GDPR (Principles relating to processing of personal data), Article 9 (1) and (2) GDPR (Processing of special categories of personal data), Article 58 (2) (d) and (i) GDPR, Article 83 (1-3) … indicating that controllers may have infringed data protection provisions. The SA in the first instance …
1 July 2025
… Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … Education and Training Board (CDETB) | 23/06/2025 | Data Protection Commission The news published here does not …
15 January 2024
… Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication … and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where … 32 of the GDPR) And one breach to the French Data Protection Act: a failure to comply with obligations …
18 May 2020
… Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR … (IMI). It has also set up a network of communications officers within the SAs, to develop and implement shared …
16 May 2022
… order as meant in article 58(2) point d. Key words: rights data subjects, information to be provided, technical and … per year for the past three years. The personal data in all these applications is not sufficiently … large-scale, serious infringements of the General Data Protection Regulation (GDPR) in its visa-issuing process. In …
19 December 2022
… of fine of 4.3 million EUR Key words: special categories of data; international data transfers; public body; DPIA; transparency obligations; … of processing; adequate safeguards; equivalent level of protection; fines Summary of the Decision Origin of the …
4 October 2022
… in private sector Legal Reference: National Law (Personal Data Protection Act), Article 5.1(c) and 6.1(f) of the GDPR … tracking Summary of the Decision Origin of the case The data controller introduced GPS tracking of seven company …
31 May 2023
… fine, Cooperation, Employment, Notification of personal data breach Summary of the Decision Origin of the case … This documentation contained, inter alia, personal data of the controller's employees and persons who were … measures that would ensure an adequate level of data protection. In the present case, the cooperation with the …
7 January 2019
… following EDPB opinion 04/2019 for the transfer of personal data between each of the European Economic Area (“EEA”) … administrative arrangement for the transfer of personal data between Each of the European Economic Area (“EEA”) … data between them, recognizing the importance of the protection of personal data and of having robust data …
11 November 2020
… transfer tools to ensure compliance with the EU level of protection of personal data Start Date: 11 November 2020 End Date: 21 December 2020 … transmitted or as such communications are stored; or (E) an officer, employee, or agent of an entity described in …
6 July 2023
… and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject) Decision: Administrative fine, Reprimand Key … individuals who had asked for them in accordance with data protection legislation. The Finnish SA finds that the …
20 September 2022
… ordered the controller to grant the access request by the data subject Key words: processing of data in the employment sector, right of access to one’s … of the GDPR and are intended to afford safeguards and protection in ways that are not fully superimposable. The …
16 May 2022
… fines Key words: illegally processing personal data in ‘fraud identification facility’, access control, … Authority (SA) uncovered numerous violations of the General Data Protection Regulation (GDPR). For example, the Tax …
1 December 2022
… 14 of the GDPR) obligation to ensure security of personal data (Article 32 of the GDPR) Decision: administrative fine … and 14 of the GDPR) Failure to ensure security of personal data (Article 32 of the GDPR) Decision Based on findings … with its obligations provided for by the General Data Protection Regulation (GDPR) and the French Postal and …
20 July 2022
… and (2): Principles relating to processing of personal data. Article 6 (1)(a)(b)(c)(d)(e)(f): Lawfulness of … and 9(2)(e): Processing of special categories of personal data. Article 12: Transparent information, communication and … be examined on the whole from the point of view of the protection of personal data. Key Findings: The Authority …