23 January 2024
… 2024 France Background information Date of final decision: 27 December 2023 Cross-border case or national case: … Key Findings The French SA found several breaches of the GDPR regarding: Warehouse stock and order management: … with the principle of data minimisation (Article 5.1.c GDPR). Failure to ensure lawful processing (Article 6 GDPR) …
27 September 2019
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Netherlands 27 September 2019 Data Protection Impact Assessment (DPIA) … of a data protection impact assessment (Article 35.4 GDPR) … 1 State Current 2019 No 6441827 November 2019 Decision concerning list of types of …
8 December 2020
… Opinion 27/2020 on the draft decision of the Danish Supervisory … Adopted Opinion 27/2020 on the draft decision of the Danish Supervisory … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the European Economic Area … the “EDPB”) is to ensure the consistent application of the GDPR throughout the EEA. To this effect, it follows from …
3 February 2022
… 2022 Greece Background information Date of final decision: 27 January 2022 Cross-border case or national case: … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact … Regulation (EU) 611/2013 Decision: Infringement of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, …
15 July 2025
… 2025 Italy Background information Date of final decision: 27 March 2025 National case Controller: Istituto di … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of … Findings The Italian SA recalled that, according to the GDPR and the Italian Data Protection Code, the use of …
25 June 2019
… 2016/679 Of The European Parliament And OF The Council of 27 April 2016 on the protection of natural persons with … “There are no prescriptive requirements to be found in the GDPR on how to authenticate the data subject. (…) … data or more generally exercising the rights granted by the GDPR. These procedures often already exist. The data …
21 December 2018
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Slovenia 21 December 2018 Data … Download Opinion / Binding decision References Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) …
… of the General Data Protection Regulation (hereinafter: GDPR) 1 . The aim of the coordinated enforcement action is … data protection officers are in accordance with Art. 37-39 GDPR and they have the resources needed to carry out their … 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with …
3 June 2020
… has the following reference number: INC000002310272. 1. Decision Following a review of the case, the Danish … Article 32(1) of the General Data Protection Regulation (GDPR). The reprimand is issued in accordance with the rules … personal data. According to Article 5(1)(f) of the GDPR, personal data must be processed confidentially, such …
10 October 2019
… (registered internally with file number CDP/IMI/LSA/27/2018) received from the Berlin Commissioner for Data … enshrined under the General Data Protection Regulation 1 ("GDPR" or the "Regulation"). The complainant contended that … this Office is not in line with what is expected under the GDPR. The submissions included the following principal …
4 December 2018
… Mnenje št. 27/2018 o osnutku seznama pristojnega nadzornega organa … 1 Adopted EDPB Plenary meeting, 04/05.12.2018 Opinion 27/2018 on the draft list of the competent supervisory … of a data protection impact assessment (Article 35.4 GDPR) Adopted on 4 December 2018 2 Adopted TABLE OF CONTENTS …
13 July 2020
… 13 July 2020 631.87 535.699 A56ID 74975 CR 82038 RD 129527 FD 135778 Final Decision The Berlin DPA closes the case. … breach or mitigate its adverse effects (Art. 33 (3) (d) GDPR) The company hired a forensics firm to identify network … or public com- munication (Art. 34 (1) or Art. 34 (3) (c) GDPR) The concerned data subjects were informed of the …
… The national Data Protection Authorities ('DPAs') of the 27 EU Member States participate in the activities of the CSC … Data subjects may exercise their rights under the GDPR by contacting directly the competent national … in accordance with Article 42 (2) of Regulation (EU) 2018/1727 . The national Data Protection Authorities ('DPAs') of …
… and processors List of documents assessed by the EDPB GDPR Certification Standard and Criteria, BC 5701:2024, Version 0.7 Opinion 27/2024 on the Brand Compliance criteria of certification … as European Data Protection Seal pursuant to Article 42.5 (GDPR) 2 December 2024 Publication Type: Opinion of the Board …
20 May 2025
… Slovenia Background information Date of final decision: 27 February 2025 National case Controller: High school Legal … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper … by design and by default, as mandated by Article 25 of the GDPR. The inspection procedure revealed a lack of proper …
5 May 2022
… of processing (Art. 32) Decision: Infringement of the GDPR and fine imposed Key words: special categories of … categories of personal data, see Article 9 (1) of the GDPR. The municipality neglected to mark the 10 attachments … had been made public on the municipality’s website on 27 September 2021, by a reporter from Romerikes Blad . The …
28 October 2019
… 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press …
25 May 2023
… Jelinek. Izvoljena je bila v dveh krogih, z 19 glasovi od 27. Anu Talus je vodja finskega organa za varstvo podatkov … temelje, na katerih bo gradila. V zadnjih petih letih je GDPR postal svetovni mejnik kot najobsežnejši zakon o … je ustanovljen s Splošno uredbo o varstvu podatkov (GDPR). Evropski odbor za varstvo podatkov pri njegovem delu …
2 June 2022
… cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch … priority for the EDPB. At a meeting held in Vienna on 27-28 April 2022, EDPB members agreed to further strengthen … cooperation to investigate compliance of this website with GDPR. After the working group was formed, the Dutch …
17 June 2025
… 2025 Finland Background information Date of final decision: 27 May 2025 National case Legal Reference (s): Article 5 … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston … was found to have infringed Articles 32 and 5.1.f of the GDPR. An administrative fine was imposed on Yliopiston …