Decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism

French SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
12 September 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
AT SA's decision on the accreditation requirements for a code of conduct monitoring body
30 August 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 9/2019 on the Austrian data protection supervisory authority draft accreditation requirements for a code of conduct monitoring body pursuant to article 41 GDPR
Iceland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
29 August 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 7/2019 on the draft list of the competent supervisory authority of Iceland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Iceland Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
16 August 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Malta Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
13 August 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Poland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 17/2018 on the draft list of the competent supervisory authority of Poland regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
26 July 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 25/2018 on the draft list of the competent supervisory authority of Croatia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
German Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
24 April 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Bulgaria Authorisation for the use of an Administrative Arrangement between EEA and non-EEA Financial Supervisory Authorities
25 March 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 4/2019 on the draft AA between EEA and non-EEA Financial Supervisory Authorities
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
19 March 2019
Decision Type
SA
Lejupielādēt
Opinion / Binding decision References
Opinion 6/2018 on the draft list of the competent supervisory authority of Estonia regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)