Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling
nl
Hellenic DPA decision on a data breach involving E.E.T.A.A. S.A. as processor for the Ministry of Social Cohesion and Family Affairs
gr
Swedish DPA fines Miljödata i Karlskrona approximately EUR 160 000 for insufficient technical and organisational measures to ensure information security
se
EDPBI:EE:OSS:D:2026:4140
EDPBI:EE:OSS:D:2026:4140
- CSA
-
-
fr
-
ie
-
nl
-
se
-
DE/BE
-
DE (Baden-Wüerttemberg)
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
EDPBI:PL:OSS:D:2026:4187
EDPBI:PL:OSS:D:2026:4187
- CSA
-
-
fr
-
it
-
se
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:PL:OSS:D:2026:4188
EDPBI:PL:OSS:D:2026:4188
- CSA
-
-
fr
-
it
-
se
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:EE:OSS:D:2026:4125
EDPBI:EE:OSS:D:2026:4125
- CSA
-
-
cy
-
fr
-
de
-
gr
-
ie
-
it
-
lu
-
nl
-
se
-
no
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Relevant topics
- Outcome
- Reprimand
EDPBI:EE:OSS:D:2026:4013
EDPBI:EE:OSS:D:2026:4013
- CSA
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- No sanction
EDPBI:IT:OSS:D:2026:4124
EDPBI:IT:OSS:D:2026:4124
- CSA
-
-
nl
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:EE:OSS:D:2026:3971
EDPBI:EE:OSS:D:2026:3971
- CSA
-
- Main legal reference
- Article 24 (Responsibility of the controller)
- Article 25 (Data protection by design and by default)
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Reprimand