2 September 2020
… of a Reprimand for the Processing of Students’ Personal Data 2 September 2020 Poland The President of the Personal Data Protection Office (UODO) imposed a penalty of a reprimand … The President of the Personal Data Protection Office (UODO) imposed a penalty of a …
18 June 2020
… Article 5 (Principles relating to processing of personal data) Article 32 (Security of processing) Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Data subject …
15 October 2018
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … 15.10.2018 1 (3) Office of the Data Protection Ombudsman P.O. Box 800, FIN-00521 Helsinki, …
13 December 2019
… of provisions of Articles 12 and 13 of the General Data Protection Regulation (GDPR); the infringement of Article 5 … it provided clear, complete and correct information to the data subjects; fine in the amount of 23893 lei, the … of provisions of Articles 12 and 13 of the General Data Protection Regulation (GDPR); the infringement of …
16 March 2019
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … Norwegian Data Protection Authority UNOFFICIAL TRANSLATION Postal Address: … operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the …
16 October 2018
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … fields of application Examples 1 Processing of biometric data for the unique identification of natural per- sons if …
5 August 2020
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Hacker attack Personal data breach … DD 126889 FD 142710 Final Decision 1. Facts concerning the data breach - Controller: AWIN AG - Incident: Credential …
17 December 2019
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Hacker attack Personal data breach … users’ sessions to be taken over and part of their profile data being accessed (e.g. posts and comments on fo- rum and …
10 October 2019
… SK Main legal reference Article 15 (Right of access by the data subject) Article 17 (Right to erasure (‘right to be … Article 21 (Right to object) Keywords Advertising Data subject rights Right to erasure Right to object Outcome … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.006.052 10 October 2019 …
10 October 2019
… SK Main legal reference Article 15 (Right of access by the data subject) Article 21 (Right to object) Keywords Advertising Data subject rights Right of access Right to object Outcome … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.007.188 10 October 2019 …
15 November 2018
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … List of Types of Data Processing Operations which require a Data Protection Impact Assessment. Introduction Article 35 of the …
13 January 2021
… threat and remove it led the company ID Finance Poland to data loss. Therefore, the President of the Personal Data Protection Office (UODO) found that the company had not … threat and remove it led the company ID Finance Poland to data loss. Therefore, the President of the Personal Data …
8 February 2019
… operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision … 1 List of processing operations subject to data protection impact assessment Office for Personal Data …
13 June 2019
… 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome No violation … Request The Office of the Commissioner for Personal Data Protection (hereafter “CY SA”) refers to the complaint of … Right to erasure, e-commerce, Exercise of the rights of data subjectsSummary of the DecisionOrigin of the case The …
19 February 2020
… and modalities for the exercise of the rights of the data subject) Article 17 (Right to erasure (‘right to be … to your company regarding a violation of the General Data Protection Regulation (GDPR) when processing personal data … to have his player account deleted from the controller database of the online game he had previously bought. The …
20 October 2020
… Guidelines 4/2019 on Article 25 Data Protection by Design and by Default 20 October 2020 … Adopted 1 Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on … Guidelines 4/2019 on Article 25 Data Protection by Design and by Default …
29 June 2020
… to erasure (‘right to be forgotten’)) Keywords Consumer protection Outcome Reprimand Summary 62.2KB Download … Hatóság (Hungarian National Authority for Data Protection and Freedom of Information, hereinafter: the … complainant. As a result of an administrative error, the data controller failed to inform the complainant about the …
28 February 2024
… 28 February 2024 EDPB Brussels, 28 February - The European Data Protection Board has kicked off its Coordinated Enforcement … 2022, and the designation and position of Data Protection Officers, in 2023 . For further information: AT DPA: … Brussels, 28 February - The European Data Protection Board has kicked off its Coordinated …
16 May 2023
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
13 January 2021
… 13 January 2021 Poland The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 1.9 million … measures to ensure the security of the processed data. UODO stated that the company infringed the principles … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 1.9 …