Go to Opinion 2/2024 on the draft decision of the Spanish Supervisory Authority regarding the Controller Binding Corporate Rules of the TELEFÓNICA Group
Guidelines 01/2021 on Examples regarding Data Breach Notification
Go to Guidelines 01/2021 on Examples regarding Data Breach Notification
EDPBI:FR:OSS:D:2021:310
EDPBI:FR:OSS:D:2021:310
- CSA
-
-
be
-
de
-
lu
-
it
-
nl
-
es
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 28 (Processor)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Administrative fine
EDPBI:FR:OSS:D:2023:999
EDPBI:FR:OSS:D:2023:999
- CSA
-
-
de
-
be
-
nl
-
es
-
pl
-
hu
-
it
-
pt
-
sk
-
hr
-
ro
-
gb
-
at
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- No sanction
EDPBI:LU:OSS:D:2023:1004
EDPBI:LU:OSS:D:2023:1004
- CSA
-
-
de
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:SE:OSS:D:2025:3762
EDPBI:SE:OSS:D:2025:3762
- CSA
-
-
at
-
dk
-
ee
-
fi
-
fr
-
hu
-
ie
-
it
-
nl
-
pl
-
es
-
no
-
de
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
Royal Greenland Group
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Suppliers
- Employees, suppliers, service providers and customers, including their contact persons
Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
Go to
Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
Equinix Inc.
- Type of BCR
- Controller
- Categories of data subjects
- Employees and business contacts
EDPBI:SE:OSS:D:2022:432
EDPBI:SE:OSS:D:2022:432
- CSA
-
-
de
-
dk
-
at
-
it
-
pl
-
fi
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand