13 May 2021
… DPA: Dragefossen AS fined 13 May 2021 Norway The Norwegian Data Protection Agency has fined the power company Dragefossen AS … on YouTube and the company’s own website. Up until the Data Protection Authority contacted the company, it was … The Norwegian Data Protection Agency has fined the power company …
12 September 2019
… of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … the list of the kind of processing operations for which a data protection impact assessment is not required The …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
15 June 2021
… for inadequate testing 15 June 2021 Norway The Norwegian Data Protection Authority has fined the Norwegian Confederation … GDPR violation. The backdrop for this case is that personal data about 3.2 million Norwegians was available online for … The Norwegian Data Protection Authority has fined the Norwegian …
10 October 2024
… 10 October - During its October 2024 plenary, the European Data Protection Board (EDPB) selected the topic for its fourth … sector, the designation and position of Data Protection Officers and the implementation of the right of access by … 10 October - During its October 2024 plenary, the European Data Protection Board (EDPB) selected the topic for its …
3 September 2019
… Data State Inspectorate of Latvia imposes a financial … 2019 Latvia On 26 August 2019, the Director of the Data State Inspectorate of Latvia (DSI) imposed a financial … online retailer, for non-compliance with the General Data Protection Regulation (GDPR), nonconformity with data …
13 May 2021
… Basaren Drift AS fined 13 May 2021 Norway The Norwegian Data Protection Authority has fined Basaren Drift AS NOK EUR … to CCTV surveillance of restaurant premises. The General Data Protection Regulation (GDPR) requires that all … The Norwegian Data Protection Authority has fined Basaren Drift AS NOK EUR …
18 May 2020
… SE Main legal reference Article 15 (Right of access by the data subject) Article 16 (Right to rectification) Keywords … Sentrum Tollbugt 3 22 39 69 00 22 42 23 50 974 761 467 www.datatilsynet.no 0105 OSLO Unntatt offentlighet: Offl §13 jfr … We refer to your complaint recieved by the Danish Data Protection Authority (DPA) on February 10th 2019 against …
20 May 2022
… Data protection issues arising in connection with the use of … Article 21(2)), Appropriate Measures (Article 24(1)), Data protection by design and by default (Article 25(1), Article … Article 21(2)), Appropriate Measures (Article 24(1)), Data protection by design and by default (Article 25(1), …
5 August 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data breach Outcome No … DD 129284 FD 142719 Final Decision 1. Facts concerning the data breach - Controller: Applause GmbH - Incident: …
25 November 2020
… in an LSS housing 25 November 2020 Sweden The Swedish Data Protection Authority issues an administrative fine of SEK … unlawful video surveillance in an LSS housing. The Swedish Data Protection Authority received a complaint from a … The Swedish Data Protection Authority issues an administrative fine of …
26 July 2019
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … 1 The list of types of personal data processing operations, for which carrying out a Data …
12 September 2018
… penal decision for infringements of the GDPR and Austrian Data Protection Act. The Austrian DPA imposed a fine on a Limited … 1 lit. a and c as well as Art. 6 para. 1 of the General Data Protection Regulation (GDPR) and several provisions of … penal decision for infringements of the GDPR and Austrian Data Protection Act. The Austrian DPA imposed a fine on a …
2 December 2019
… the provisions of Article 12 paragraph (3) of the General Data Protection Regulation. The controller BNP Paribas Personal … limit provided by Article 12 paragraph (3) of the General Data Protection Regulation, although it had requested the … the provisions of Article 12 paragraph (3) of the General Data Protection Regulation. The controller BNP Paribas …
12 February 2021
… of Indre Østfold 12 February 2021 Norway The Norwegian Data Protection Authority has fined the Municipality of Indre … 000 (NOK 200,000) for a confidentiality violation. Personal data that should have been restricted was available to … The Norwegian Data Protection Authority has fined the Municipality of …
6 July 2021
… with robocalls without consent 6 July 2021 Finland The Data Protection Ombudsman’s sanctions board has imposed an administrative fine on a magazine publisher due to data protection violations related to direct marketing. The … The Data Protection Ombudsman’s sanctions board has imposed an …
18 August 2020
… fine for Rælingen municipality The Norwegian Data Protection Authority has imposed an administrative fine of … 47,500 to Rælingen Municipality. The fine is imposed after data concerning health of children with special needs was … fine for Rælingen municipality The Norwegian Data Protection Authority has imposed an administrative fine …
5 August 2019
… Article 13 (Information to be provided where personal data are collected from the data subject) Keywords Data subject rights Outcome No violation Summary 59.8KB … file number CDP/IMI/LSA/6/2019) received from the Spanish Data Protection Agency (Agencia Espanola de Proteccion de …
20 July 2020
… authority 20 July 2020 The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on an … provide the President of the UODO with access to personal data and other information necessary for the performance of … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on …
27 January 2020
… and modalities for the exercise of the rights of the data subject) Article 17 (Right to erasure (‘right to be … that took place between the CNIL's services and the Data Protection Officer of in the framework of the examination of … The complainant requested to have his account and personal data deleted and objected to the reception of direct …