Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing
Italian DPA fines IQVIA EUR 7 000 000 for unlawful processing of patients’ health data
Italian DPA fines security company EUR 39 000 for violations concerning employees’ data
Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs
Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security
se
Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling
EDPBI:EE:OSS:D:2026:4140
EDPBI:EE:OSS:D:2026:4140
- CSA
-
-
be
-
ie
-
se
-
DE (Baden-Wüerttemberg)
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
EDPBI:PL:OSS:D:2026:4187
EDPBI:PL:OSS:D:2026:4187
- CSA
-
-
se
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:PL:OSS:D:2026:4188
EDPBI:PL:OSS:D:2026:4188
- CSA
-
-
se
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case