25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
25 November 2020
… 25 November 2020 Poland The President of the Personal Data Protection Office, after having conducted ex officio proceedings relating to breach of personal data protection of persons subject to medical quarantine by … The President of the Personal Data Protection Office, after having conducted ex officio …
20 September 2019
… 20 September 2019 Poland The President of the Personal Data Protection Office imposed a fine of an amount higher than … and technical measures for the protection of personal data were not appropriate to the risk posed by the … The President of the Personal Data Protection Office imposed a fine of an amount higher …
15 July 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data) Decision: Administrative fine Key words: … recalled that, according to the GDPR and the Italian Data Protection Code, the use of biometric data in the workplace …
7 October 2019
… 1/6 Ref No. UOOU-03390/19-7 ORDER The Office for Personal Data Protection, as the competent administrative authority … in the Commercial Register maintained by the the executive officer of which is born DD Month YYYY, residing at Address … Key words: Lawfulness of processing, Legitimate interest, Data subject rightsSummary of the DecisionOrigin of the case …
10 October 2019
… Information and Data Protection Commissioner Vs COMPLAINT Reference is made to … main establishment as when we asked for the data protection officer, at that time, he/she was not present. INVESTIGATION … Cooperation with the supervisory authority, Exercise of data subjects’ rights, Marketing communicationsSummary of …
11 September 2020
… 11 September 2020 Poland The President of the Personal Data Protection Office, after having found a personal data … UODO stated that in the case concerned the Data Protection Officer (DPO) performed its tasks without having due regard … The President of the Personal Data Protection Office, after having found a personal data …
27 April 2021
… also a failure to cooperate 27 April 2021 Poland The Polish Data protection Authority, stating that PNP SA with its … office in Warsaw violated the provisions of the General Data Protection Regulation, imposed an administrative fine … The Polish Data protection Authority, stating that PNP SA with its …
28 October 2019
… PL Main legal reference Article 15 (Right of access by the data subject) Keywords Data subject rights Right of access Outcome Administrative … Information and Data Protection Commissioner Vs COMPLAINT Reference is made to … Infringement of Article 15 GDPR Key words: Right of access, Data subjects’ rights, Data subject access request, Bank, …
7 March 2019
… and modalities for the exercise of the rights of the data subject) Article 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome No sanction … by a , which was passed on to this office by the French data protection authority (CNIL) on the basis of Art. 56 …
17 October 2023
… action, the EDPB prioritises a certain topic for data protection authorities (DPAs) to work on at the national … selected the designation and position of data protection officers (DPOs). The report on the outcome of the 2023 … action, the EDPB prioritises a certain topic for data protection authorities (DPAs) to work on at the …
… EU coordinated action for 2023 15 March 2023 - The European Data Protection Board (EDPB) launches today the second … year on the designation and position of Data Protection Officers (DPOs). As intermediaries between data protection … 15 March 2023 - The European Data Protection Board (EDPB) launches today the second …
20 July 2020
… authority 20 July 2020 The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on an … provide the President of the UODO with access to personal data and other information necessary for the performance of … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 5 000 on …
22 March 2019
… Article 5 (Principles relating to processing of personal data) Article 6 (Lawfulness of processing) Article 7 (Conditions for consent) Keywords Data subject rights E-Commerce Lawfulness of processing … refer to the email exchange between my department and your Data Protection Officer (hereinafter “DPO”), as part of the …
25 September 2025
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing) Decision: … fine Key words: Administrative fine, Anti-Money Laundering, Data security, Lawfulness of processing, Data subject rights, Data protection by design and by default Summary of the Decision …
14 October 2025
… 14 October - During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth … sector (2023) designation and position of Data Protection Officers (2024) implementation of the right of access by … 14 October - During its October plenary, the European Data Protection Board (EDPB) picked the topic for its fifth …
2 June 2020
… 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome Compliance … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.007.125 2 June 2020 GAIJIN … order Key words: Right to erasure, Identity verification, Data subject rightsSummary of the DecisionOrigin of the case …
17 December 2019
… about your handling of his request to have his personal data erased. The ICO’s role Part of our role is to consider complaints from individuals who believe their data protection rights have been infringed. We want to improve … your information rights obligations. Yours sincerely Case Officer Information Commissioner’s Office Direct dial …
12 August 2019
… than six months, the controller had neither appointed a data protection officer nor published its contact details or reported those … than six months, the controller had neither appointed a data protection officer nor published its contact details or …