5 June 2025
… Law & Compliance in AI Security & Data Protection 5 June 2025 Support Pool of Experts projects EDPB … Training curriculum on AI and data protection Law & Compliance in AI Security & Data Protection … Law & Compliance in AI Security & Data Protection …
… group of national supervisory authorities and the European Data Protection Supervisor (EDPS) to ensure coordinated … non EU-nationals (ECRIS-TCN) European Asylum Dactyloscopy Database (EURODAC) Interoperability of EES, ETIAS, … group of national supervisory authorities and the European Data Protection Supervisor (EDPS) to ensure coordinated …
23 June 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Electronic communications Employment … inspection launched by the Hungarian National Authority for Data Protection and Freedom of Information (hereinafter …
10 October 2019
… Information and Data Protection Commissioner Vs COMPLAINT Reference is made to … main establishment as when we asked for the data protection officer, at that time, he/she was not present. INVESTIGATION … Cooperation with the supervisory authority, Exercise of data subjects’ rights, Marketing communicationsSummary of …
25 September 2020
… prior consent as well as neglecting the rights of the data subject 25 September 2020 Finland Financial sanction … prior consent as well as neglecting the rights of the data subject The sanctions board of the Finnish Data Protection Ombudsman has imposed an administrative fine on …
7 May 2025
… Article 30 (Records of processing activities), Article 35 (Data protection impact assessment), Article 38 (Position of the data protection officer) Decision: Administrative fine Key words: … Article 30 (Records of processing activities), Article 35 (Data protection impact assessment), Article 38 (Position of …
15 July 2022
… on Otavamedia for deficiencies in the implementation of data protection rights 15 July 2022 Finland Background … case Controller: Otavamedia Oy Legal Reference: Data minimisation (Article 5(1)(c)), transparent … case Controller: Otavamedia Oy Legal Reference: Data minimisation (Article 5(1)(c)), transparent …
28 November 2024
… fine of 2 500 € for the way of collecting the data 28 November 2024 Poland Background information Date of … Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 …
7 October 2019
… 1/6 Ref No. UOOU-03390/19-7 ORDER The Office for Personal Data Protection, as the competent administrative authority … in the Commercial Register maintained by the the executive officer of which is born DD Month YYYY, residing at Address … Key words: Lawfulness of processing, Legitimate interest, Data subject rightsSummary of the DecisionOrigin of the case …
18 November 2025
… SAMARITAINE SAS Legal Reference: obligation to process data lawfully and breach of the principle of liability … (article 5-1-c) of the GDPR); Failure to involve the Data Protection Officer in matters relating to the protection of personal … SAMARITAINE SAS Legal Reference: obligation to process data lawfully and breach of the principle of liability …
7 December 2020
… providers control staff access to patient journal data 7 December 2020 Sweden The Swedish Data Protection Authority has audited eight health care providers … The Swedish Data Protection Authority has audited eight health care providers … providers control staff access to patient journal data …
28 October 2019
… PL Main legal reference Article 15 (Right of access by the data subject) Keywords Data subject rights Right of access Outcome Administrative … Information and Data Protection Commissioner Vs COMPLAINT Reference is made to … Infringement of Article 15 GDPR Key words: Right of access, Data subjects’ rights, Data subject access request, Bank, …
10 March 2020
… Personal data breach at the Breiðholt Upper Secondary School – … Upper Secondary School in a case relating to a personal data breach. The breach occurred when a teacher at the … instance, the data had to do with an intervention by child protection services. Furthermore, there were data on one …
7 March 2019
… and modalities for the exercise of the rights of the data subject) Article 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome No sanction … by a , which was passed on to this office by the French data protection authority (CNIL) on the basis of Art. 56 …
7 October 2021
… SA: Police reprimanded for illegal processing of personal data with facial recognition software 7 October 2021 Finland … Reference: Art. 14 in the Act on the Processing of Personal Data in Criminal Matters and in Connection with Maintaining … Summary of the Decision Origin of the case The Deputy Data Protection Ombudsman has issued a statutory reprimand to the …
28 November 2024
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), … order Key words: Accountability, Administrative fine, Data subject rights, Hacker attack, National identification … 21 000 individuals. The President of the Personal Data Protection Office found that this occurred because the …
3 February 2022
… imposed to telecommunications companies due to personal data breach and illegal data processing 3 February 2022 Greece Background … not been obtained from the data subject (Article 14), Data protection by design and by default (Article 25), Security … and modalities for the exercise of the rights of the data subject (Article 12), Information to be provided where …
28 November 2024
… Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data) Decision: Administrative fine, Compliance order Key … Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 …
9 June 2022
… telemarketing company for ignoring an order issued by the Data Protection Ombudsman 9 June 2022 Finland Background … of a sales call made to the customer. In July 2021, the Data Protection Ombudsman ordered the company to give the … of a sales call made to the customer. In July 2021, the Data Protection Ombudsman ordered the company to give the …
3 April 2020
… 3 April 2020 Poland The President of the Personal Data Protection Office imposed a fine of PLN 20 000 on Vis … criminal liability for this. The President of the Personal Data Protection Office (UODO) decided to conduct inspection … The President of the Personal Data Protection Office imposed a fine of PLN 20 000 on Vis …