Go to Statement 1/2026 of the EDPB on smart glasses
TGS
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Clients, customers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of patients’ health data
it
Italian DPA fines security company EUR 39 000 for violations concerning employees’ data
it
Italian DPA fines Emirates EUR 180 000 for infringements concerning passengers’ health data
it
Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing
it
Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling
nl
Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security
se
Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs
gr
EDPBI:EE:OSS:D:2026:4140
EDPBI:EE:OSS:D:2026:4140
- CSA
-
-
be
-
dk
-
fr
-
hu
-
ie
-
nl
-
pl
-
sk
-
es
-
se
-
DE/BE
-
DE SA (Hessen)
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand