11 June 2019
… data in the old system had never been deleted. The GDPR establishes that personal data must be stored in such a … data in the old system had never been deleted. The GDPR establishes that personal data must be stored in such a …
24 February 2022
… 31), Powers (Art. 58 (1)(e)) Decision: infringement of GDPR, fine issued Key words: investigative powers, lack of … 31), Powers (Art. 58 (1)(e)) Decision: infringement of GDPR, fine issued Key words: investigative powers, lack of …
14 April 2020
… of advising and ensuring the correct application of the GDPR and the E-Privacy Directive, to be fully involved in … of advising and ensuring the correct application of the GDPR and the E-Privacy Directive, to be fully involved in …
28 October 2019
… the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press … the provisions of Article 5 paragraph (1) letter f) of the GDPR. Legal and Communication Department To read the press …
15 July 2025
… The DO has violated the general data protection regulation (GDPR) by not having taken sufficiently effective security … The DO has violated the general data protection regulation (GDPR) by not having taken sufficiently effective security …
6 July 2023
… method of delivering call recordings in accordance with the GDPR. Neither did the company inform the Finnish SA of … method of delivering call recordings in accordance with the GDPR. Neither did the company inform the Finnish SA of …
15 March 2023
… the position in their organisations required by Art. 37-39 GDPR and the resources needed to carry out their tasks, … on the role of data protection officers (EN) Italian SA: GDPR: focus dei Garanti europei sul ruolo dei responsabili … the position in their organisations required by Art. 37-39 GDPR and the resources needed to carry out their tasks, …
5 May 2022
… decision BCR - C Lundbeck Group 92.2KB English Download Pre-GDPR No …
28 May 2024
… BCR-P decision Genpact 2024 258.9KB Romanian Download Pre-GDPR No …
19 April 2022
… Netherlands Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body Vereniging Netbeheer …
8 April 2025
… Approval decision (EN) 100.7KB English Swedish Download Pre-GDPR No …
3 October 2024
… 149.6KB English Download Pre-GDPR No …
8 June 2023
… 414.1KB English Download Pre-GDPR No …
22 March 2022
… decision Norican Group 2022 93.5KB English Download Pre-GDPR No …
13 August 2025
… Luxembourg Type Code for Controllers/Processors subject to GDPR Scope National Monitoring Body ESCEM ASBL Code de …
19 August 2022
… Authority regarding Accor SA under Article 65(1)(a) GDPR …
13 December 2021
… Legal basis (Article 6) Decision: Infringement of the GDPR declared and fine imposed, order to establish … Legal basis (Article 6) Decision: Infringement of the GDPR declared and fine imposed, order to establish …
7 July 2022
… the controller (Article 24) Decision: Infringement of the GDPR, Order to comply Key words: Cyber attack, Ransomware, … the controller (Article 24) Decision: Infringement of the GDPR, Order to comply Key words: Cyber attack, Ransomware, …
24 May 2022
… right of access (Article 15) Decision: infringement of the GDPR, fine 1.5 million ISK (approx. 10.700 Euros). Key … right of access (Article 15) Decision: infringement of the GDPR, fine 1.5 million ISK (approx. 10.700 Euros). Key …
31 May 2023
… characteristics of a data breach within the meaning of the GDPR. The Polish SA, taking into account the scope of … characteristics of a data breach within the meaning of the GDPR. The Polish SA, taking into account the scope of …