12 August 2019
… than six months, the controller had neither appointed a data protection officer nor published its contact details or reported those … than six months, the controller had neither appointed a data protection officer nor published its contact details or …
4 December 2019
… Systems 4 December 2019 The coordinated supervision of data processing through large EU information systems and by … Committee was created within the framework of the European Data Protection Board (EDPB) and brings together the EU … The coordinated supervision of data processing through large EU information systems and by …
15 June 2021
… of Oslo fined 15 June 2021 Norway The Norwegian Data Protection Authority has fined the Municipality of Oslo EUR … 400,000) for making documents containing sensitive personal data public. The case concerns an HR issue posted on eInnsyn … The Norwegian Data Protection Authority has fined the Municipality of Oslo …
18 November 2025
… Right of access: Data Protection Authority fines bank 100 000 EUR. Customers can access their data contained in telephone order recordings 18 November … and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data …
21 February 2022
… Swedish Authority for Privacy Protection (IMY) fines Region Uppsala for breaches in its … for Privacy Protection (IMY) has received two personal data breach notifications from Region Uppsala. The data breaches concern sensitive personal data sent without … for Privacy Protection (IMY) has received two personal data breach notifications from Region Uppsala. The data …
5 October 2022
… The CSC aims to enhance cooperation among the different data protection supervisory authorities and ensure a more … to Article 62 of Regulation 2018/1725 or to the European Data Protection Board, and by implication, to the CSC. Over … The CSC aims to enhance cooperation among the different data protection supervisory authorities and ensure a more …
20 July 2020
… be carried out 20 July 2020 The President of the Personal Data Protection Office (UODO), after having conducted an … protection, and whether GGK has appointed a Data Protection Officer. Unfortunately, due to the lack of access by the … The President of the Personal Data Protection Office (UODO), after having conducted an …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 28 … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
10 December 2020
… Committee was created within the framework of the European Data Protection Board (EDPB) and brings together the EU supervisory authorities (SAs) and the European Data Protection Supervisor (EDPS), as well as the … Committee was created within the framework of the European Data Protection Board (EDPB) and brings together the EU …
5 April 2022
… The Swedish Authority for Privacy Protection (IMY) issues an administrative fine against … Reference: principles relating to processing of personal data (Articles 5.1a, 5.2), rights of the data subject (Articles 12.1, 13.1 c, e-f, 13.2 a-b, f, 14.2 … Reference: principles relating to processing of personal data (Articles 5.1a, 5.2), rights of the data subject …
18 December 2019
… 18 December 2019 Germany The Federal Commissioner for Data Protection and Freedom of Information (BfDI) imposed a fine … 37 of the GDPR to appoint an internal data protection officer. When imposing the 10.000 Euro fine, the fact was … The Federal Commissioner for Data Protection and Freedom of Information (BfDI) imposed a …
6 August 2020
… National Credit Register (BKR) fined for personal data access charges 6 August 2020 Netherlands The National … can no longer charge people who wish to access the personal data it holds on them. In addition, if data subjects wish to … this is not permitted. As a result, the Dutch Data Protection Authority (Dutch DPA) issued the BKR with a …
16 December 2019
… 5 paragraph (1) letter d) and paragraph (2) of General Data Protection Regulation; the infringement of provisions of Articles 6 and 7 of General Data Protection Regulation; the infringement of provisions … 5 paragraph (1) letter d) and paragraph (2) of General Data Protection Regulation; the infringement of provisions …
20 September 2019
… 20 September 2019 Poland The President of the Personal Data Protection Office imposed a fine of an amount higher than … and technical measures for the protection of personal data were not appropriate to the risk posed by the … The President of the Personal Data Protection Office imposed a fine of an amount higher …
11 February 2021
… fine to Gveik AS 11 February 2021 Norway The Norwegian Data Protection Authority has fined Gveik AS EUR 7 500 (NOK … rating on them. The individual filed a complaint with the Data Protection Authority. Credit rating for personal … The Norwegian Data Protection Authority has fined Gveik AS EUR 7 500 (NOK …
1 July 2021
… to amend agreements 1 July 2021 Norway The Norwegian Data Protection Authority’s inspection of Oslo University … hospital cannot document satisfactory control of patient data when the hospital needs laboratory services from other … The Norwegian Data Protection Authority’s inspection of Oslo University …
11 February 2021
… for forwarding e-mail 11 February 2021 Norway The Norwegian Data Protection Authority has fined an organization EUR 40 000 … for more than a month. After investigating the matter, the Data Protection Authority concludes that the forwarding was … The Norwegian Data Protection Authority has fined an organization EUR 40 …
20 April 2023
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … of more than 5 300 EUR (23 580 PLN) on the Disciplinary Officer of the Bar Association for breaching the provisions …
18 November 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 … are collected from the data subject), Article 35 (Data protection impact assessment), Article 37 (Designation of the data protection officer), Article 38 (Position of the data protection …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 28 … data subject), Article 38 (Position of the data protection officer) Decision: Administrative fine Key words: …