16 May 2022
… by the data subject (Art. 15) Decision: Infringement of the GDPR and fine imposed, Reprimand Key words: Credit rating … by the data subject (Art. 15) Decision: Infringement of the GDPR and fine imposed, Reprimand Key words: Credit rating …
15 March 2022
… 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access … 21), Information (Art. 13) Decision: Infringement of the GDPR and fine imposed, Order to comply Key words: Access …
22 June 2022
… of Processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: unauthorised access, Lack … of Processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: unauthorised access, Lack …
15 September 2022
… Spain Type Code for Controllers/Processors subject to GDPR Scope National Código de conducta regulador del …
10 December 2020
… authority, article 33 (1) Decision: Infringement of the GDPR, administrative fine Key words: Data breach, delayed … authority, article 33 (1) Decision: Infringement of the GDPR, administrative fine Key words: Data breach, delayed …
10 June 2021
… of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For … of the Rescue Service in Östra Skaraborg for violations of GDPR. The camera surveillance has recently ceased. For …
31 March 2022
… of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of … of accountability by not having implemented an effective GDPR compliance and management model to avoid the risk of …
25 November 2019
… provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) … provided by Article 5 paragraph (1) letter d) of the GDPR. Thus, according to Article 5 paragraph (1) letter d) …
24 May 2022
… of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 … of processing (Article 6) Decision: infringement of the GDPR, order to comply, fine 1 million ISK (approx. 7.200 …
26 April 2022
… Key Findings This case is an important reminder that the GDPR's requirement to provide information also applies when … Key Findings This case is an important reminder that the GDPR's requirement to provide information also applies when …
6 February 2025
… in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an … in Września for infringement of Articles 33 and 34 of the GDPR. The President of the Polish SA considered that an …
7 May 2025
… 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, … 500 € for infringement of Article 24(1) and 32(1,2) of the GDPR. Additionally, on the basis of the issued decision, …
12 January 2023
… Platforms Ireland Limited and its Facebook service (Art. 65 GDPR) … Decision concerning a complaint directed against …
20 August 2020
… Netherlands Type Code for Controllers/Processors subject to GDPR Scope National Opinion/Guideline References Guidelines …
7 December 2023
… measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR) … Enforcement notice in the matter of Meta Platforms …
11 January 2024
… Italy Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body (website under …
21 March 2022
… Guidelines 02/2022 on the application of Article 60 GDPR 14 March 2022 Publication Type: Guidelines Topics: …
8 February 2022
… for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic … for claims handling. This practice has violated the GDPR. The Data Protection Ombudsman notes that the Traffic …
13 May 2021
… contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has … contravened Article 6(1) and Article 5(1)(a) of the GDPR. In its decision, the Data Protection Authority has …
30 April 2020
… The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s … The documentation of the breach, as required under the GDPR, was also found incomplete with regards to the NGSC’s …