5 February 2020
… SE Main legal reference Article 15 (Right of access by the data subject) Article 32 (Security of processing) Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 … J.No. 2019-7320-1396 Doc.no. 179147 Caseworker The Danish Data Protection Agency Carl Jacobsens Vej 35 2500 Valby …
13 July 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data … The Berlin DPA closes the case. 1. Facts concerning the data breach - Controller: Xara GmbH - Incident: Hacker …
3 April 2019
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data … 631.30 and 535.461 Berlin Commissioner for Data Protection and Freedom of Information Final decision …
12 February 2021
… reprimand to Telenor for inadequate protection of personal data 12 February 2021 Norway The Norwegian Data Protection Authority have issued a reprimand to Telenor … in its voicemail function, and for failing to submit a data breach notification to the Norwegian Data Protection …
13 July 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Consumer … The Berlin DPA closes the case. 1. Facts concerning the data breach - Controller: Dubsmash Inc. / Mobile Motion GmbH …
18 July 2023
… Romanian SA fines UiPath SRL for breaching Articles 25 and 32 GDPR 18 July 2023 Romania … Controller: UiPath SRL Legal references: Article 25 (Data protection by design and by default), Article 32 … Decision: Administrative fine, Compliance order Key words: Data protection by design and by default, Personal data …
5 November 2025
… the EDPB will already work on creating a template for data protection impact assessment (DPIA) and for data breach notifications. We invite you to provide your … the EDPB will already work on creating a template for data protection impact assessment (DPIA) and for data breach …
6 July 2022
… Loss of a document with personal data and failure to notify the incident as a reason for a … z o.o. Sp. k. Legal Reference: notification of a personal data breach to the supervisory authority (Art. 33 (1)) Decision: … z o.o. Sp. k. Legal Reference: notification of a personal data breach to the supervisory authority (Art. 33 (1)) …
18 November 2025
… Finnish SA: S-Bank fined for data security vulnerability 18 November 2025 Finland … Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by … design and by default, Administrative fine, Personal data breach Summary of the Decision Origin of the case The …
18 June 2020
… Article 5 (Principles relating to processing of personal data) Article 32 (Security of processing) Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 … J.nr. 2019-7320-1443 Dok.nr. 226402 Sagsbehandler Datatilsynet Carl Jacobsens Vej 35 2500 Valby T 3319 3200 …
25 January 2019
… of processing) Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data … Berlin Commissioner for Data Protection and Freedom of Information Final decision …
4 September 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data … The Berlin DPA closes the case. 1. Facts concerning the data breach - Controller: Apassionata World GmbH - Incident: …
5 January 2022
… fine imposed on psychotherapy centre Vastaamo for data protection violations 5 January 2022 Finland Background … Vastaamo Legal Reference: Notification of a personal data breach to the supervisory authority (Art. 33(1)), … Vastaamo Legal Reference: Notification of a personal data breach to the supervisory authority (Art. 33(1)), …
17 April 2023
… EDPB adopts final version of Guidelines on data subject rights - right of access 17 April 2023 EDPB … the EDPB has adopted a final version of the Guidelines on data subject rights - Right of access . The Guidelines … lead supervisory authority and the Guidelines on data breach notification . Both guidelines concern an update of …
7 April 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Data retention … the controller informs the complainant that his personal data have been the subject of a data leak. The controller …
15 July 2025
… fine against the Equality Ombudsman when personal data was collected via a web form 15 July 2025 Sweden … administrative fine Key words: administrative fine, data security, restriction of processing, personal data breach, public administration, sensitive data Summary of …
3 June 2020
… Article 32 (Security of processing) Keywords Personal data breach Outcome Reprimand Summary 60.4KB Download Decision … J.No. 2019-441-3337 Doc.no. 167462 Caseworker The Danish Data Protection Agency Borgergade 28, 5. 1300 Copenhagen … 1092 København K Danmark Sent by Digital Post Personal data breach The Danish Data Protection Agency (DPA) returns to …
26 August 2019
… reference Article 32 (Security of processing) Article 35 (Data protection impact assessment) Keywords Personal data breach Outcome Reprimand Summary 559.4KB Download Decision … 73811.1) – Case Register 67969 1/2 THE OFFICE FOR PERSONAL DATA PROTECTION Pplk. Sochora 27, 170 00 Prague 7 tel.: 234 …
2 February 2021
… EDPB response to TikTok letter on confidentiality breach 2 February 2021 Letters EDPB … the matter of a letter of 13 August 2020 from the Irish Data Protection Commissioner (the “IE SA”) to TikTok, which … issue to our attention. We are indeed concerned about any breach of confidentiality. Should you have further …
8 June 2021
… fines P4 company PLN 100,000 8 June 2021 Poland The Polish Data Protection Authority has imposed an administrative fine … authority within 24 hours after having detected a personal data breach. The reason for the administrative fine is that the … The Polish Data Protection Authority has imposed an administrative fine …