11 February 2021
… Dutch DPA fines OLVG hospital for inadequate protection of medical records 11 February 2021 Netherlands The Dutch Data Protection Authority (DPA) has imposed a fine of … medical information, patient records also contain personal data like citizen service numbers, addresses and phone …
22 March 2019
… Article 5 (Principles relating to processing of personal data) Article 6 (Lawfulness of processing) Article 7 (Conditions for consent) Keywords Data subject rights E-Commerce Lawfulness of processing … refer to the email exchange between my department and your Data Protection Officer (hereinafter “DPO”), as part of the …
11 May 2021
… Dutch DPA: PVV Overijssel fined for failing to report data breach 11 May 2021 Netherlands The Dutch Data Protection Authority (DPA) has imposed a fine of €7,500 on … The Dutch Data Protection Authority (DPA) has imposed a fine of €7,500 on … Dutch DPA: PVV Overijssel fined for failing to report data breach …
12 February 2021
… imposed on it in an administrative decision. The Personal Data Protection Office (UODO) ordered the entrepreneur to … the name and contact details for the data protection officer or other contact point where more information can be … imposed on it in an administrative decision. The Personal Data Protection Office (UODO) ordered the entrepreneur to …
10 October 2019
… forgotten’)) Article 6 (Lawfulness of processing) Keywords Data retention Right to erasure Outcome No violation Summary … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.006.014 10 October 2019 Data … No infringement of the GDPR Key words: Right to erasure, Data retention, Legal claims, Compliance with a legal …
28 November 2024
… Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 25 (Data protection by design and by default), Article 32 (Security … Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), …
13 January 2021
… Polish DPA & WARTA: Failure to notify a personal data breach without undue delay as a reason for imposing a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a … Company) infringed the provisions of the General Data Protection Regulation, because it did not notify a …
3 August 2019
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where … correspondence, received 8 March 2019, with regard to the data protection complaint that has been raised with the ICO …
9 August 2019
… reference Article 6 (Lawfulness of processing) Keywords Data subject rights Lawfulness of processing Right to object … that took place between the CNIL's services and the data protection officer of your company in the framework of the … spam emails, unsolicited communication, rights of the data subjectSummary of the DecisionOrigin of the case The …
17 December 2019
… about your handling of his request to have his personal data erased. The ICO’s role Part of our role is to consider complaints from individuals who believe their data protection rights have been infringed. We want to improve … your information rights obligations. Yours sincerely Case Officer Information Commissioner’s Office Direct dial …
2 June 2020
… 17 (Right to erasure (‘right to be forgotten’)) Keywords Data subject rights Right to erasure Outcome Compliance … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Our ref. 11.17.001.007.125 2 June 2020 GAIJIN … order Key words: Right to erasure, Identity verification, Data subject rightsSummary of the DecisionOrigin of the case …
28 April 2020
… of processing) Article 15 (Right of access by the data subject) Keywords Consumer protection Right of access Outcome Reprimand Summary 61.6KB … reprimand your company for an infringement of the Gen- eral Data Protection Regulation (GDPR) when processing personal …
1 July 2019
… Romanian Supervisory Authority sanction on data controller UTTIS INDUSTRIES SRL 1 July 2019 Romania In … Supervisory Authority finalised an investigation at data controller UTTIS INDUSTRIES SRL and found out that it … with Article 6 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing …
8 February 2022
… Lawfulness, fairness and transparency (Art. 5(1)(a)), data minimisation (Art. 5(1)(c)), data protection by design and by default (Art. 25(2)) … Lawfulness, fairness and transparency (Art. 5(1)(a)), data minimisation (Art. 5(1)(c)), data protection by design and by default (Art. 25(2)) Decision: …
22 June 2019
… Main legal reference Article 33 (Notification of a personal data breach to the supervisory authority) Article 34 (Communication of a personal data breach to the data subject) Keywords Personal data breach Outcome No … complaint and I am of the view that has complied with its data protection obligations. You have explained that …
2 September 2020
… of a Reprimand for the Processing of Students’ Personal Data 2 September 2020 Poland The President of the Personal Data Protection Office (UODO) imposed a penalty of a reprimand … The President of the Personal Data Protection Office (UODO) imposed a penalty of a …
2 July 2024
… Committee (CSC) elected Fanny Coudert from the European Data Protection Supervisor (EDPS) as its new coordinator for a … former coordinator Clara Guerra from the Portuguese Data Protection Authority (DPA). Fanny Coudert will lead the … Committee (CSC) elected Fanny Coudert from the European Data Protection Supervisor (EDPS) as its new coordinator for …
3 August 2019
… Article 5 (Principles relating to processing of personal data) Keywords Accuracy Data subject rights E-Commerce Outcome No sanction Summary … email correspondence of 14 May 2019 with regard to the data protection complaint that has been raised with the ICO … Reference: Principles relating to processing of personal data (Article 5), Right to rectification (Article 16), Right …
12 November 2019
… Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where personal data have not been obtained from the data subject) Article … REPUBLIC OF CYPRUS OFFICE OF THE COMMISSIONER FOR PERSONAL DATA PROTECTION Final Decision IMI Article 56 identification …
11 January 2021
… Polish DPA Fines ENEA S.A.: A data breach must be notified to the supervisory authority 11 … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) received information about the … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) …