Privacy Navigator OLD

Cases T-70/23, T-84/23 T-111/23

Supervisory Authorities

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

GDPR in Practice – Experience of Data Protection Authorities by FRA

Supervisory Authorities

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Chief Information Security Officer_ HANDBOOK

Risk Management

C-340/21

Controllers and Processors, Liability and Remedies, Supervisory Authorities, Technical and Organisational Measures (TOMs)

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Risk Management

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

Case ZWO 22/775, Overijssel District, Netherlands

Liability and Remedies, Supervisory Authorities

GDPR: a culture of non-compliance? Numbers of evidence-based enforcement efforts by nyob

Liability and Remedies, Supervisory Authorities

CASE STUDIES (2018 – 2023) by the Irish DPC

Access Requests (DSAR), Controllers and Processors, Data Breaches, Data Subjects Rights, Liability and Remedies, Supervisory Authorities

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

Risk Management

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

Liability and Remedies, Supervisory Authorities

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Remedies, Supervisory Authorities

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Liability and Remedies, Supervisory Authorities

Guidelines issued by the Malta Gaming Authority for the Maltese Gaming Industry

Gaming, Specific processing situations

AUTOMATED DECISIONMAKING TECHNOLOGY REGULATIONS (DRAFT) by CPPA

Automated Decision-making, Controllers and Processors

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Infographic DPC TikTok Fine

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Study on the national administrative rules impacting the cooperation duties for the national supervisory authorities

Supervisory Authorities

C-645/19

Supervisory Authorities

C-245/20

Supervisory Authorities

C-300/21

Liability and Remedies, Supervisory Authorities

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Risk Management

Guidelines scraping by private organizations and individuals by the Dutch Data Protection Authority

Automated Decision-making, Controllers and Processors

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Data Protection Fining Guidelines by UK ICO

Liability and Remedies, Supervisory Authorities

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

Automated Decision-making

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Liability and Remedies, Supervisory Authorities

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Supervisory Authorities

Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority

Supervisory Authorities

Guidelines 02/2022 on the application of Article 60 GDPR

Supervisory Authorities

Guidelines 07/2022 on certification as a tool for transfers

Certification

Automated Decision-Making in Online Platforms: Protection Against Discrimination and Manipulation of Behavior

Automated Decision-making, Controllers and Processors

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

Automated Decision-making

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

Board of Directors Handbook for Cloud Risk Governance | Google

Risk Management

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management

GDPR Fines Tracker

Liability and Remedies, Supervisory Authorities

Welcome to the Privacy Navigator!

⭐ Quick Links:

Cases T-70/23, T-84/23 T-111/23

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

Reducing Risks Posed by Synthetic Content by NIST

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

GDPR in Practice – Experience of Data Protection Authorities by FRA

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

Cyber Threat Modelling for Risk Assessment by CSB

Chief Information Security Officer_ HANDBOOK

C-340/21

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Case ZWO 22/775, Overijssel District, Netherlands

GDPR: a culture of non-compliance? Numbers of evidence-based enforcement efforts by nyob

CASE STUDIES (2018 – 2023) by the Irish DPC

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Press Release No 184-23 by the CJEU

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Guidelines issued by the Malta Gaming Authority for the Maltese Gaming Industry

AUTOMATED DECISIONMAKING TECHNOLOGY REGULATIONS (DRAFT) by CPPA

Automated Decision-Making Under the GDPR by the FPF

Infographic DPC TikTok Fine

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Study on the national administrative rules impacting the cooperation duties for the national supervisory authorities

C-645/19

C-245/20

C-300/21

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Guidelines scraping by private organizations and individuals by the Dutch Data Protection Authority

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

Data Protection Fining Guidelines by UK ICO

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority

Guidelines 02/2022 on the application of Article 60 GDPR

Guidelines 07/2022 on certification as a tool for transfers

Automated Decision-Making in Online Platforms: Protection Against Discrimination and Manipulation of Behavior

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

ANAF Case C‑201/14, 1 October 2015

Board of Directors Handbook for Cloud Risk Governance | Google

A Guide to Lawful Basis | UK ICO

The EDPB data protection guide for small business

Approach to Data Spaces from GDPR Perspective (AEPD)

GDPR Fines Tracker