14 March 2023
… fines controller EUR 4500 for failure to notify a personal data breach 14 March 2023 Poland Background information Date … Legal references: Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … of the Decision Origin of the case The Personal Data Protection Office has received an information indicating a …
16 June 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Consumer protection E-Commerce Personal data breach Outcome Reprimand … DD 109067 FD 131464 Final Decision 1. Facts concerning the data breach - Controller: EyeEm Mobile GmbH (free online …
1 December 2022
… (CSC) has re-elected Clara Guerra from the Portuguese data protection authority (DPA) as its coordinator for a term of … agency. It was created within the framework of the European Data Protection Board (EDPB) and brings together the EU data … (CSC) has re-elected Clara Guerra from the Portuguese data protection authority (DPA) as its coordinator for a …
5 May 2022
… The EU’s Data Act: data protection must prevail to empower data subjects 5 May 2022 EDPB Brussels, 5 May - The European Data Protection Supervisor (EDPS) and the European Data … Brussels, 5 May - The European Data Protection Supervisor (EDPS) and the European Data …
… group of national supervisory authorities and the European Data Protection Supervisor (EDPS) to ensure coordinated … non EU-nationals (ECRIS-TCN) European Asylum Dactyloscopy Database (EURODAC) Interoperability of EES, ETIAS, … group of national supervisory authorities and the European Data Protection Supervisor (EDPS) to ensure coordinated …
10 April 2024
… (CSC) has elected Matej Sironic from the Slovenian Data Protection Authority (DPA) as its Deputy Coordinator for a … agency. It was created within the framework of the European Data Protection Board (EDPB) and brings together the EU data … (CSC) has elected Matej Sironic from the Slovenian Data Protection Authority (DPA) as its Deputy Coordinator …
24 April 2024
… of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) 24 April 2024 Other guidance EDPB … to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national … of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) …
25 May 2023
… Anu Talus elected new Chair of the European Data Protection Board 25 May 2023 EDPB The EDPB has elected Anu Talus as the new Chair of the European Data Protection Board (EDPB) to replace outgoing Chair … EDPB has elected Anu Talus as the new Chair of the European Data Protection Board (EDPB) to replace outgoing Chair …
20 December 2019
… London pharmacy fined after “careless” storage of patient data 20 December 2019 United Kingdom The Information … for failing to ensure the security of special category data. Doorstep Dispensaree Ltd, which supplies medicines to … or damage is an infringement of the General Data Protection Regulations (GDPR). The ICO launched its …
13 July 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Consumer protection Personal data breach Social media Outcome No … The Berlin DPA closes the case. 1. Facts concerning the data breach - Controller: Dubsmash Inc. / Mobile Motion GmbH …
3 April 2020
… 3 April 2020 Poland The President of the Personal Data Protection Office imposed a fine of PLN 20 000 on Vis … criminal liability for this. The President of the Personal Data Protection Office (UODO) decided to conduct inspection … The President of the Personal Data Protection Office imposed a fine of PLN 20 000 on Vis …
4 June 2020
… administrative fine for several deficiencies in personal data processing 4 June 2020 Finland The Office of the Data Protection Ombudsman’s sanctions board imposed an … The Office of the Data Protection Ombudsman’s sanctions board imposed an … administrative fine for several deficiencies in personal data processing …
28 November 2024
… Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data) Decision: Administrative fine, Compliance order Key … Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 …
14 March 2022
… medical clinic for shortcomings in implementing rights of a data subject 14 March 2022 Finland Background information … (Article 12), Information to be provided where personal data are collected from the data subject (Article 13) … the medical clinic who complained to the Office of the Data Protection Ombudsman stated that they had not received their …
7 May 2025
… Article 30 (Records of processing activities), Article 35 (Data protection impact assessment), Article 38 (Position of the data protection officer) Decision: Administrative fine Key words: … Article 30 (Records of processing activities), Article 35 (Data protection impact assessment), Article 38 (Position of …
28 November 2024
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), … order Key words: Accountability, Administrative fine, Data subject rights, Hacker attack, National identification … 21 000 individuals. The President of the Personal Data Protection Office found that this occurred because the …
4 December 2019
… Systems 4 December 2019 The coordinated supervision of data processing through large EU information systems and by … Committee was created within the framework of the European Data Protection Board (EDPB) and brings together the EU … The coordinated supervision of data processing through large EU information systems and by …
18 November 2025
… SAMARITAINE SAS Legal Reference: obligation to process data lawfully and breach of the principle of liability … (article 5-1-c) of the GDPR); Failure to involve the Data Protection Officer in matters relating to the protection of personal … SAMARITAINE SAS Legal Reference: obligation to process data lawfully and breach of the principle of liability …
6 February 2025
… administrative fine of 928 498,06 € for failure to inform data breach victims 6 February 2025 Poland Background … and remedies and be provided with the contact of the Data Protection Officer who could provide more information about the breach. … Reference (s): Article 34 (Communication of a personal data breach to the data subject) Decision: Administrative …
17 June 2025
… Apteekki issued administrative fine for online shop data protection shortcomings 17 June 2025 Finland Background … Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by … Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by …