Filtered (105)
Filters
Search
Type
Country
Categories
Show (105)
Cancel
Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

Standard contractual clauses for EU-EEA by EU

Standard Contractual Clauses (SCC)

Standard contractual clauses for international transfers by EU

Data Transfers, Standard Contractual Clauses (SCC)

Slovenian SA Decision 0603-42/2023/12 against Dodo Pizza

CCTV, Lawfulness of Processing, Legitimate Interest

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Accountability Toolkit Tracker

Accountability

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Accountability Toolkit Tracker – more information about the Toolkit by UK ICO

Accountability

Italian Data Protection Authority (Garante)-Eni Plenitude S.p.A. (6/6/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Municipality of Modica (7/18/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners’ association (2/5/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Debt collection company (10/5/2023)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Axpo Italia Spa (9/28/2023)

Accountability, Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Website operator (5/17/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Green Network S.p.A. (4/14/2023)

Accountability, Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Sorgenia S.p.a. (4/14/2023)

Accountability, Principles, Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BRD-Groupe Société Générale S.A. (6/15/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-TIM S.p.A. (4/13/2023)

Accountability, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Political party (4/22/2022)

Accountability, Data Subjects Rights, Principles

Austrian Data Protection Authority (dsb)-Operator of a public toilet (8/23/2022)

Lawfulness of Processing, Legitimate Interest, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tehnoplus Industry SRL (3/23/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Mister Brick S.a.s. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Italian Data Protection Authority (Garante)-Areti spa (11/24/2022)

Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Colosseo S.r.l. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Hellenic Data Protection Authority (HDPA)-School (9/9/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Company (10/9/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Italian Data Protection Authority (Garante)-Lazio Region (9/15/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (10/5/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Recover AS (8/25/2022)

Lawfulness of Processing, Public Interests

Information Commissioner of Isle of Man-Manx Care Ltd (7/13/2022)

Accountability, Controllers and Processors, Data minimisation, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Policoro municipality (8/1/2022)

Accountability, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Arbeidstilsynet (5/16/2022)

Lawfulness of Processing, Public Interests

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de Proprietari Aviației Park (6/20/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (3/2/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Danske Bank (4/5/2022)

Accountability, Principles

Data Protection Authority of Ireland-Meta Platforms Ireland Limited (3/15/2022)

Accountability, Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Elektro & Automasjon Systemer AS (12/13/2021)

Lawfulness of Processing, Legitimate Interest

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (12/6/2021)

Access Requests (DSAR), Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

French Data Protection Authority (CNIL)-Régie autonome des transports parisiens (11/4/2021)

Accountability, Controllers and Processors, Data minimisation, Principles, Representative, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Website operator (4/20/2021)

Accountability, Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-Caixabank S.A. (7/8/2021)

Lawfulness of Processing, Legitimate Interest

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Storstockholms Lokaltrafik (6/21/2021)

Data Subjects Rights, Lawfulness of Processing, Legitimate Interest, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-PURPLE SEA MΟΝΟΠΡΟΣΩΠΗ ΙΚΕ (6/3/2021)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Ireland-Irish Credit Bureau DAC (3/23/2021)

Accountability, Data Subjects Rights, Principles, Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Equifax Iberica S.L. (3/10/2021)

Lawfulness of Processing, Legitimate Interest

Data Protection Authority of Baden-Wuerttemberg-VfB Stuttgart 1893 AG (3/10/2021)

Accountability, Principles

Italian Data Protection Authority (Garante)-Regione Lazio (1/14/2021)

Accountability, Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Università Campus Bio-medico di Roma (Polyclinic) (10/26/2020)

Accountability, Principles, Sensitive Data

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg discussion paper on “Legal Foundations in Data Protection for the Use of AI”

AI, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Case C‑621/22 CJEU

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR by EDPB

Lawfulness of Processing, Legitimate Interest

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

THE NEW STANDARD CONTRACTUAL CLAUSES – QUESTIONS AND ANSWERS

Data Transfers, Standard Contractual Clauses (SCC)

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Processing Personal Data on the Basis of Legitimate Interests under the GDPR by FPF

Lawfulness of Processing, Legitimate Interest

GUIDELINES ON LEGITIMATE INTEREST by the NPC of the Republic of Philippines

Lawfulness of Processing, Legitimate Interest

GDPR guidance: Legitimate Inerersts Assessments (LIA) for Digital Advertising

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

Infographic DPC TikTok Fine

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Fairness, Liability and Remedies, Principles, Supervisory Authorities

C-597/19

Lawfulness of Processing, Legitimate Interest

C-708/18

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-496/17

Lawfulness of Processing, Public Interests

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-306/21

Lawfulness of Processing, Public Interests

Case C-60/22

Accountability, Controllers and Processors, Joint Controllers, Principles

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Relying on the legal basis of legitimate interests to develop an AI system by CNIL

Lawfulness of Processing, Legitimate Interest

Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR) |EDPB

Controllers and Processors, Data Transfers, Standard Contractual Clauses (SCC)

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

Opinion on legitimate interests of the data controller (Opinion 06/2014)

Legitimate Interest

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

Joint Guide to ASEAN MCC and EU SCC

Data Transfers, Standard Contractual Clauses (SCC)

Guide to Accountability and Governance | UK ICO

Accountability

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

CIPL Examples of Legitimate Interest Grounds for Processing of Personal Data [PDF] [Official Guidelines]

Lawfulness of Processing, Legitimate Interest

Guidelines 07/2022 on certification as a tool for transfers

Certification

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests