20 January 2023
… Reference: Principles relating to processing of personal data (Article 5(1)(a)(e); Lawfulness of processing (Article … and modalities for the exercise of the rights of the data subject (Article 12); Information to be provided where … controllers not established in the Union (Article 27); Data protection impact assessment (Article 35) …
22 July 2020
… Type: Guidelines Topics: Financial matters The European Data Protection Board welcomes comments on the Guidelines … set out in the Regulation and in accordance with applicable data protection rules. All legal details can be found in our …
2 February 2024
… and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 25 (Data protection by design and by default) Decision: reprimand Key …
30 May 2018
… - version adopted after public consultation The European Data Protection Board welcomes comments on the Guidelines 1/2018 … circumstances (including the appointment of Data Protection Officers and carrying out data protection impact …
12 June 2023
… case: Cross-border case LSA: Swedish Authority for Privacy Protection (IMY) CSAs: All other SAs Controller: Spotify … Legal references: Article 15 (Right to access by the data subject), Article 12.1, Article 12.3, Article 58, … the complainants request for access Key words: Exercise of data subject rights, Transparency, Administrative fine …
16 May 2023
… Article 13 (Information to be provided where personal data are collected from the data subject), Article 28 (Processor) Decision: … provision of Article 13, paragraph 1 of the General Data Protection Regulation. This resulted in non-transparent …
7 December 2023
… and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 25 (Data protection by design and by default) Decision: Warning Key …
4 November 2024
… Decision: Compliance order, Definitive limitation data processing, Administrative fine Key words: CCTV, … people or property (violation of Article 78 of the national Data Protection Act). And second, these CCTV footages were …
21 June 2022
… (Art. 6) and principles relating to processing of personal data (Art. 5) Decision: Infringement of the GDPR and fine … process had no legal basis according to the General Data Protection Regulation. Publication of a CV has been a …
15 April 2024
… fine Keywords: own-initiative investigation, biometric data, Data Protection Impact Assessments Summary of the Decision …
18 July 2023
… Controller: UiPath SRL Legal references: Article 25 (Data protection by design and by default), Article 32 (Security … Decision: Administrative fine, Compliance order Key words: Data protection by design and by default, Personal data …
4 March 2022
… (Art. 32) and Principles relating to processing of personal data (Art. 5) Decision: Infringement of the GDPR and fine … of the case The Norwegian parliament – the Storting – had a data breach in late 2020. In January 2022, the Norwegian … similar effective security measures to achieve satisfactory protection. Decision The Norwegian SA have issued a EUR …
7 September 2020
… New Technology Automated decision & profiling The European Data Protection Board welcomes comments on the Guidelines 8/2020 … according to Article 35 GDPR, and whether a data protection officer must be appointed under Article 37 GDPR. In the …
19 January 2024
… Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 … and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be … activities in relation to the exercise of her data protection rights. For the infringement described above, …
12 February 2019
… Monitoring Bodies under Regulation 2016/679 The European Data Protection Board welcomes comments on the Guidelines 1/2019 … and monitoring body. Similar to a data protection officer, the monitoring body should be able to act free from …
11 January 2024
… Article 9 (Processing of special categories of personal data), Article 16 (Right to rectification), Article 21 … order, Erasure order Key words: Right to erasure, Sensitive data, Exercise of data subject rights, Lawfulness of … party then lodged a complaint with the Belgian Data Protection Authority. Key Findings The Church's legal …
15 March 2022
… Norwegian SA have concluded that, pursuant to the General Data Protection Regulation , the employer had no legal basis for … in violation of the rules concerning notification of the data subject and the obligation to consider the employee’s …
13 December 2021
… A credit rating is the result of a compilation of personal data from many different sources and shows the likelihood of … on loans, mortgages and debt-to-income ratio. The General Data Protection Regulation requires all processing of personal …
30 November 2022
… (1) (a) GDPR (Principles relating to processing of personal data), Article 9 (1) and (2) GDPR (Processing of special categories of personal data), Article 58 (2) (d) and (i) GDPR, Article 83 (1-3) … indicating that controllers may have infringed data protection provisions. The SA in the first instance …
15 October 2020
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where … imposed 40.000 € and requirement of adaptation to data protection regulations 1054-0319 Summary of the complaint … line 639610479 in which a person pretended to be a police officer, which took place on 09/01 / 2018. For this reason, …