27 January 2025
… procedure (OSS). LSA: Netherlands and CSAs: Austria (two data subjects from Austria lodged a complaint with the … Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication … Those complaints were submitted to the Austrian data protection authority and forwarded to the Dutch SA, because …
15 June 2023
… and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 15 … Pursuant to the one-stop shop set up by the General Data Protection Regulation (GDPR), this decision was submitted to …
6 September 2023
… Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication, … and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where … SA concluded that the University had not complied with data protection principles in Article 5 GDPR and not informed the …
27 June 2023
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … Association of Iceland regarding the processing of personal data by the credit information agency Creditinfo Lánstraust … hf. According to Article 15 of the Icelandic Data Protection Act the operation of credit reference agencies …
12 January 2024
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: … 10 GDPR and Article 10 of the LOPDGDD (national data protection law) for unlawfully requesting a criminal …
31 May 2023
… website. Using an online form, the bank requested various data about the applicant's income, occupation and personal … details. Based on the information requested and additional data from external sources, the bank's algorithm rejected … the automated rejection and complained to the Berlin data protection commissioner. Key Findings Even when asked by …
2 May 2024
… Article 13 (Information to be provided where personal data are collected from the data subject) Decision: Violation identified, Administrative … on cybersecurity that offers tools for data and privacy protection to the public. Decision The decision of the … Article 13 (Information to be provided where personal data are collected from the data subject) Decision: …
18 May 2020
… EDPB Annual Report 2019 1 EDPB Annual Report 2019 1 European Data Protection Board 2019 Annual Report WORKING TOGETHER FOR … (IMI). It has also set up a network of communications officers within the SAs, to develop and implement shared … ocuments/zalecenia/recommendation-012019-draft-list-european-data-protection_bg …
27 June 2023
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … Association of Iceland regarding the processing of personal data by the credit information agency Creditinfo Lánstraust … hf. According to Article 15 of the Icelandic Data Protection Act the operation of credit reference agencies …
13 May 2021
… 1, letters a) and c) (lawfulness, fairness, transparency; data minimisation); Article 6 (Lawful processing); Article 9 (Processing of special category data); Article 13 (Information); Article 35 (DPIA); Article … the municipality (controller) had not complied with data protection principles although it had entered into an ad-hoc …
2 September 2024
… Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing). Decision: … the confidentiality and integrity of the personal data of its employees, having been brought to the attention … of an employee that involves non-compliance with data protection regulations has been confirmed by the …
7 December 2023
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data), Article 15 (Right to access by the data subject) … the Complainant’s personal data to a third party was a data protection breach. The transfer or communication of personal …
2 February 2024
… 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data), Article 15 (Right to access by the data subject) … the Complainant’s personal data to a third party was a data protection breach. The transfer or communication of personal …
12 July 2019
… Joint Opinion 1/2019 on the processing of patients’ data and the role of the European Commission within the … Joint Opinion 1/2019 on the processing of patients’ data and the role of the European Commission within the … 3 The European Data Protection Board and the European Data Protection Supervisor …
13 October 2022
… Article 9 (processing of special categories of personal data, including health data); Article 12 (transparent information, communication … patients and committed additional infringements of data protection laws. In particular, after downloading the app, … Article 9 (processing of special categories of personal data, including health data); Article 12 (transparent …
21 May 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where … 24 (Responsibility of the controller), Article 25 (Data protection by design and by default) Decision: …
21 May 2025
… professionals in the sector, particularly those who resell data, including the many intermediaries in this ecosystem known as data brokers. The French SA carried out investigations on … Electronic Communications Code (CPCE) and the General Data Protection Regulation (GDPR) regarding the collection and …
6 October 2022
… in private sector Legal Reference: National Law (Personal Data Protection Act) Decision: Order to comply Key words: Video … work areas Summary of the Decision Origin of the case The data controller, engaged in metal machining, installed video … in private sector Legal Reference: National Law (Personal Data Protection Act) Decision: Order to comply Key words: …
26 July 2024
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … and modalities for the exercise of the rights of the data subject), Article 83 (General conditions for imposing … of the fine, Lithuanian SA relied on the European Data Protection Board Guidelines 04/2022 of 24 May 2023 on the …
30 August 2019
… Binding decision References Opinion 9/2019 on the Austrian data protection supervisory authority draft accreditation … Ordinance of the Data Protection Authority on the requirements for a body …