Resources

GUIDE ON RESPONSIBLE USE OF BIOMETRIC DATA IN SECURITY APPLICATIONS BY Personal Data Protection Commission (PDPC) and Security Association Singapore (SAS)

Sensitive Data, Technical and Organisational Measures (TOMs)

CYBERSECURITY HANDBOOK by NATIONAL CYBERSECURITY AUTHORITY HELLENIC REPUBLIC

Technical and Organisational Measures (TOMs)

Cyber Security Handbook for Small Business and Not-for-Profit Directors by Australian Information Security Association

Technical and Organisational Measures (TOMs)

Training and Awareness Toolkit Tracker

Technical and Organisational Measures (TOMs)

Information & Cyber Security Checklist Tracker

Technical and Organisational Measures (TOMs)

Accountability Toolkit Tracker

Accountability

Information & Cyber Security Checklist Tracker – more information about the Toolkit by UK ICO

Technical and Organisational Measures (TOMs)

Training and Awareness Toolkit Tracker – more information about the Toolkit by UK ICO

Technical and Organisational Measures (TOMs)

Accountability Toolkit Tracker – more information about the Toolkit by UK ICO

Accountability

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Apoteket AB. (8/29/2024)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Apohem AB (8/29/2024)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (5/20/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Municipality of Korou (7/22/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-AXA REAL ESTATE INVESTMENT MANAGERS IBERICA S.A. y SEUR GEOPOST, S.L. (6/26/2024)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-METRO SA (6/27/2024)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Eni Plenitude S.p.A. (6/6/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Res-Gastro M. Gaweł Sp. k. (4/29/2024)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DENTALCUADROS BCN S.L.P. (5/8/2024)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Daycare center (7/15/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Greek Ministry of Immigration and Asylum (4/2/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-CTC EXTERNALIZACIÓN, S.L (2/12/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Azienda socio-sanitaria locale n. 1 di Sassari (2/8/2024)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Municipality of Modica (7/18/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-EURO MINI STORAGE ROMANIA SRL (3/5/2024)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Bremen-Operator of a dating platform (7/15/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Ministry of Rural Development and Food (1/29/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A. (10/26/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners’ association (2/5/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Dutch Supervisory Authority for Data Protection (AP)-International Card Services B.V. (1/15/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-TECHNINK LEB SRL (1/15/2024)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Hora Credit IFN SA (12/7/2023)

Controllers and Processors, Data Breaches, Data Subjects Rights, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Kourou municipality (12/12/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden-Östersund Municipality’s Department for Children and Education (11/28/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Athens Urban Transport Organization (9/25/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Storage limitation

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-OTP BANK ROMANIA SA (11/3/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden-Indcap AB (11/7/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-APOLLONIA TOPCO, S.L. (11/2/2023)

Controllers and Processors, Data minimisation, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Usl Toscana centro (9/28/2023)

Controllers and Processors, Lawfulness of Processing, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Rompetrol Downstream SRL (11/13/2023)

Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Mensajero SRL (10/24/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Axpo Italia Spa (9/28/2023)

Accountability, Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Asl Napoli 3 Sud (9/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Debt collection company (10/5/2023)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-RESTART ENERGY ONE S.A. (9/26/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Ovest Milanese (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Hotel (9/26/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-FONTANORTE, S.L. (7/27/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Camedi s.r.l. (6/1/2023)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Company (4/20/2023)

Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-CaixaBank, S.A. (7/4/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Benetton Group S.r.l. (4/27/2023)

Data minimisation, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Sjúkratyringur Íslands (6/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Heilsuveru (7/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Website operator (5/17/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ama S.p.a. (4/27/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Farmacia Ardealul SRL (6/27/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda ULSS 6 Euganea (5/17/2023)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Niedersachsen-Company (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Green Network S.p.A. (4/14/2023)

Accountability, Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Sorgenia S.p.a. (4/14/2023)

Accountability, Principles, Privacy by Design

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BRD-Groupe Société Générale S.A. (6/15/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-TIM S.p.A. (4/13/2023)

Accountability, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A. (5/12/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-NN Asigurări de Viață S.A. (5/12/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-AUTOMOBILE BAVARIA SRL (5/18/2023)

Controllers and Processors, Principles, Privacy by Design, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Bolzano municipality (3/23/2023)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Bulgarian Commission for Personal Data Protection (KZLD)-Bulgarian Post EAD (5/4/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Political party (4/22/2022)

Accountability, Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-GSMA LTD. (5/3/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Epic Ltd. (2/3/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ALBERO FORTE COMPOSITE, S.L. (4/28/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Spanish Data Protection Authority (aepd)-KFC RESTAURANTS SPAIN, S.L. (4/20/2023)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden-Skåne region (4/26/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Eurosanità S.P.A. (12/15/2022)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-Dutch Social Insurance Institution (SVB) (1/19/2023)

Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Logistics company (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Physician (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Covid-19 test center (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Company (10/27/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Ospedaliera Bianchi Melacrino Morelli (1/26/2023)

Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-WUNSCHURLAUB S.L. (2/28/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda socio-sanitaria locale n. 1 di Sassari (3/23/2023)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Integral Collection SRL (3/6/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Partidul Uniunea Salvați România (3/15/2023)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Med Life S.A. (3/16/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tehnoplus Industry SRL (3/23/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Ireland-Centric Health Ltd. (1/23/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-A&G Couriers Limited T/A Fastway Couriers (Ireland) (12/30/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Finopro IFN SA (3/6/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Medijobs Platform SRL (2/8/2023)

Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Company (8/23/2022)

Accuracy, Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Mister Brick S.a.s. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cyprus Electricity Authority (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cypriot Ministry of Defense (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-DW Dynamic Works LIMITED (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Private individual (11/24/2022)

Controllers and Processors, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Occidentale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Centrale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Giuliano Isontina (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-Hermes Airport Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-DW Dynamic Works LIMITED (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Universal Life Insurance Public Co Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-TIMSHEL Sp. z o.o. (8/30/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Dalarna Region (1/17/2023)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Apă Canal Ilfov SA (1/4/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Areti spa (11/24/2022)

Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

French Data Protection Authority (CNIL)-FREE SAS (12/8/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SUDREZIDENȚIAL Broker S.R.L. (12/22/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Medicover S.R.L. (11/24/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-DISCORD INC. (11/10/2022)

Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank NV Amsterdam Sucursala București (11/21/2022)

Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Colosseo S.r.l. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Romanian Post (11/7/2022)

Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-School (9/9/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Curtea Veche Publishing SRL (9/21/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Lazio Region (9/15/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (10/5/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Hørsholm municipality (9/12/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-SOLIVESA MASTER FRANCHISE S.L. (8/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Enel Energie Muntenia S.A. (8/22/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-E Software Concept SRL (7/7/2022)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Data Protection Authority of Schleswig-Holstein-Physician (7/13/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Schleswig-Holstein-Physician (7/13/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Saarland-Restaurant (7/13/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Information Commissioner of Isle of Man-Manx Care Ltd (7/13/2022)

Accountability, Controllers and Processors, Data minimisation, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Lolland municipiality (8/11/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Niedersachsen-Unknown (7/13/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Niedersachsen-Unknown (7/13/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Policoro municipality (8/1/2022)

Accountability, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Niedersachsen-Volkswagen (7/26/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-ESVETEL, S.L. (7/22/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Company (7/13/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-SIRIUS (law firm) (7/14/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Dei Sette Laghi (5/22/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Continental Automotive Romania SRL (6/30/2022)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de Proprietari Aviației Park (6/20/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Danish Data Protection Authority (Datatilsynet)-Civilstyrelsen (5/12/2022)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MED LIFE S.A. (5/24/2022)

Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavík (5/3/2022)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-ASST di Lodi (4/26/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda USL Toscana Centro (3/10/2022)

Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-DEDALUS BIOLOGIE (4/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (3/2/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Danish National Genome Center (3/25/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Polish National Personal Data Protection Office (UODO)-PIKA Sp. z o.o. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-English School Cyprus (3/22/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-English School staff union (ESSA) (3/21/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Condor SA (3/28/2022)

Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Bank of Ireland (4/5/2022)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Danske Bank (4/5/2022)

Accountability, Principles

Croatian Data Protection Authority (azop)-Retail company (name not available at the moment) (3/8/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Meta Platforms Ireland Limited (3/15/2022)

Accountability, Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Azienda sanitaria unica regionale Marche (1/13/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Hamburg-Restaurant (7/12/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Restaurant (7/12/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hamburg-Restaurant (7/12/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-OTE Group (1/27/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Travel agency (12/16/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Uppsala regional board (1/26/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Centro di Medicina preventiva s.r.l. (12/16/2021)

Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (12/6/2021)

Access Requests (DSAR), Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Danish Data Protection Authority (Datatilsynet)-Municipality of Frederiksberg (12/16/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-UAB Prime Leasing (11/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-Transavia (11/12/2021)

Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Régie autonome des transports parisiens (11/4/2021)

Accountability, Controllers and Processors, Data minimisation, Principles, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Valoris Center S.R.L. (11/26/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-SERVICIOS LOGÍSTICOS MARTORELL SIGLO XXI, S.L. (10/26/2021)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-IKEA ROMÂNIA SA (11/1/2021)

Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.P.E.E.H. Hidroelectrica S.A. (11/1/2021)

Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO SANSUEÑA, S.L. (10/5/2021)

Controllers and Processors, Principles, Representative, Storage limitation, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-La Prima S.r.l. (9/16/2021)

Controllers and Processors, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Danish Cancer Society (9/29/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Høylandet Municipality (9/20/2021)

Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-ST. OLAVS HOSPITAL HF (9/20/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Agency (8/23/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Midtjylland Region (9/8/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Atac s.p.a. (7/22/2021)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-APOEL FC (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-AC Omonia (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Hellenic Technical Enterprises Ltd. (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Favrskov municipality (9/16/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Syddanmark Region (9/17/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Aeroporto Guglielmo Marconi di Bologna S.p.a. (6/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-President of the Zgierz District Court (8/13/2021)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria, S.A. (8/25/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Website operator (4/20/2021)

Accountability, Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-Club Náutico el Estacio (8/2/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Niedersachsen-Company (7/12/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-IT services company (7/5/2021)

Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-UWV (Dutch employee insurance service provider) (5/31/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Region of Syddanmark (7/16/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Unknown (7/12/1905)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Directorate of the Östra Skaraborg Rescue Service (6/9/2021)

Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-BRAbank ASA (5/28/2021)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-Orthodontic Clinic (2/4/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Danish Data Protection Authority (Datatilsynet)-Vejle Municipality (6/16/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-BRICO PRIVÉ (6/14/2021)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Moss municipality (6/4/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-PURPLE SEA MΟΝΟΠΡΟΣΩΠΗ ΙΚΕ (6/3/2021)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Voice Integrate Nordic AB (6/7/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish Data Protection Authority (UODO)-Cyfrowy Polsat S.A. (4/22/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Comune di Palermo (4/15/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Irish Credit Bureau DAC (3/23/2021)

Accountability, Data Subjects Rights, Principles, Privacy by Design

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) (3/24/2021)

Controllers and Processors, Data Breaches, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-World Class România S.A. (5/7/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-InfoMentor ehf (4/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Kukimbia S.L. (4/5/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Electrotecnica Bastida S.L. (4/5/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Istituti ospedalieri bergamaschi (2/11/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Asker Municipality (3/15/2021)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative, Technical and Organisational Measures (TOMs)

Czech Data Protection Auhtority (UOOU)-Private healthcare provider (7/12/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Ålesund Municipality (3/15/2021)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Medicover S.R.L. (3/23/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Air Europa Lineas Aereas, SA. (3/15/2021)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Mobile Communications S.A. (3/30/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Roma Servizi per La Mobilita S.r.l. (2/11/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Natural person holding the position of General Secretary for a political party in Bucharest (3/4/2021)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Data Protection Authority of Baden-Wuerttemberg-VfB Stuttgart 1893 AG (3/10/2021)

Accountability, Principles

Italian Data Protection Authority (Garante)-Regione Lazio (1/14/2021)

Accountability, Data Subjects Rights, Principles

Polish National Personal Data Protection Office (UODO)-Krajowa Szkoła Sądownictwa i Prokuratury (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Security company (name not available at the moment) (2/22/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Tusla Child and Family Agency (8/12/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Nacionaliniam visuomenės sveikatos centrui (NVSC) (2/26/2021)

Controllers and Processors, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-IT sprendimai sėkmei (2/26/2021)

Controllers and Processors, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Registrų Centras (3/2/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Hellenic Bank (3/3/2021)

Controllers and Processors, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cypriot Real Estate Registration Authority (3/3/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-KEPIDES (3/3/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-University College Dublin (12/17/2020)

Controllers and Processors, Data Breaches, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-OLVG (2/11/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Unknown (1/22/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Unknown (1/27/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Unknown (1/27/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Qualitance QBS SA (12/29/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-ID Finance Poland Sp. z o.o. (12/17/2020)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Doctor (12/17/2020)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Doctor (12/17/2020)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Next Time Media Agency Ltd. (Next Time Media Ügynökség Kft.) (12/16/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Gnosjö Municipality (11/25/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Dada Creation S.R.L. (11/24/2020)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cyprus Police (10/22/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Università Campus Bio-medico di Roma (Polyclinic) (10/26/2020)

Accountability, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Scanshare s.r.l. (9/30/2020)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Marsorom S.R.L. (10/15/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Warsaw University of Life Sciences (9/8/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Global Business Travel Spain SLU (7/10/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Romanian Post National Company (7/30/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Cntar Tarom SA (7/27/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Østfold HF Hospital (6/22/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Proleasing Motors SRL (7/9/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Municipality of Rælingen (7/10/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Wind Tre S.p.A. (7/13/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (4/23/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Accounting firm (1/24/2020)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data Protection Authority of Baden-Wuerttemberg-Allgemeine Ortskrankenkasse (‘AOK’) (health insurance company) (6/30/2020)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Enel Energie (6/18/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania (6/11/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Taksi Helsinki (5/29/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Telenor Norge AS (5/3/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Attorney (6/9/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Kymen Vesi Oy (5/22/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Enel Energie (3/25/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Vodafone Romania (3/25/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Banca Comercială Română SA (5/5/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (10/15/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone ONO, S.A.U. (2/28/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Aegean Marine Petroleum Network Inc. (12/19/2019)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Shop Macoyn, S.L. (12/10/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Hora Credit IFN SA (12/10/2019)

Controllers and Processors, Data Breaches, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance (1/13/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Military Hospital (10/24/2019)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Mobile Communications SA (12/18/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (12/11/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Doorstep Dispensaree Ltd. (Pharmacy) (12/17/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (11/29/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Rheinland-Pfalz-Hospital (12/3/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S CNTAR TAROM SA (Airline) (12/4/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. (11/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Royal President S.R.L. (11/29/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Representative, Technical and Organisational Measures (TOMs)

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)-Telecoms provider (1&1 Telecom GmbH) (11/11/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (7/11/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Baden-Wuerttemberg-Unknown (7/11/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Madrileña Red de Gas (Unknown)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-UWV (Dutch employee insurance service provider) (10/31/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Slovak Data Protection Office-Social Insurance Agency (Unknown)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Czech Data Protection Auhtority (UOOU)-Individual entrepreneur – no further details published (Unknown)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Corporación radiotelevisión espanola (11/19/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-FAN Courier Express SRL (11/25/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (11/19/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Raiffeisen Bank SA (10/9/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Vreau Credit SRL (10/9/2019)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Slovak Data Protection Office-Slovak Telekom (Unknown)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden-School in Skellefteå (8/20/2019)

Controllers and Processors, Data minimisation, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-LEGAL COMPANY & TAX HUB SRL (7/5/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Dutch Supervisory Authority for Data Protection (AP)-Haga Hospital (6/18/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-ACTIVE ASSURANCES (car insurer) (7/25/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Austrian Data Protection Authority (dsb)-Company in the medical sector (8/1/2019)

Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (8/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-DSK Bank (8/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Oslo Municipal Education Department (4/29/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Morele.net (9/10/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-Employer UNIONTRAD COMPANY (6/13/2019)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-WORLD TRADE CENTER BUCHAREST SA (7/2/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Marriott International, Inc (10/30/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Authority of Baden-Wuerttemberg-Knuddels.de (11/21/2018)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Italian political party Movimento 5 Stelle (4/17/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Czech Data Protection Auhtority (UOOU)-Unknown (2/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Czech Data Protection Auhtority (UOOU)-Credit brokerage (2/4/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

EU Cyber Resilience Act (CRA)

Technical and Organisational Measures (TOMs)

The EU’s International Cooperation on Cyber Capacity Building| second edition

Technical and Organisational Measures (TOMs)

Secure Future Initiative Report by Microsoft

Technical and Organisational Measures (TOMs)

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Guide to Good Governance in Cybersecurity by DCSD

Technical and Organisational Measures (TOMs)

ENISA Threat Landscape 2024 EU Agency for Cybersecurity

Technical and Organisational Measures (TOMs)

Meta Fined $101 Million for Exposing Millions of Passwords in Plaintext

Lawfulness of Processing, Technical and Organisational Measures (TOMs)

C-340/21

Controllers and Processors, Liability and Remedies, Supervisory Authorities, Technical and Organisational Measures (TOMs)

MITIGATING SECURITY & PRIVACY RISKS by Data Security Council of India

Technical and Organisational Measures (TOMs)

Privacy Impact Assessment (PIA) Templates by CNIL

Data Protection Impact Assessment (DPIA)

Recommendation 01/2019 on the draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) |EPDB

Controllers and Processors, Data Protection Impact Assessment (DPIA)

National Strategy to Advance Privacy-Preserving Data Sharing and Analytics by the EO by the US President

Anonymisation, Controllers and Processors, Technical and Organisational Measures (TOMs)

Comparison of U.S. State Privacy Laws. Data Protection Assessments by CIPL

Controllers and Processors, Data Protection Impact Assessment (DPIA)

EO 13800 on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

Controllers and Processors, Technical and Organisational Measures (TOMs)

Draft Impact Assessment Framework by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Guide to Technical and Organisational Data Protection Measures (TOM) by the Swiss FDPIC

Controllers and Processors, Technical and Organisational Measures (TOMs)

One-stop-shop case digest on Security of Processing and Data Breach Notification by the EDPB

Controllers and Processors, Data Breaches, Technical and Organisational Measures (TOMs)

Annex: A summary of the Transparency in Health and Social Care guidance impact assessment by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Transparency in health and social care by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

[Press release] Commission opens formal proceedings against X under the Digital Services Act

Digital Services Act

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

Privacy-Enhancing and Privacy Preserving Technologies: Understanding the Role of PETs and PPTs in the Digital Age by CIPL

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cybersecurity of Artificial Intelligence in the AI Act by the European Commision

Controllers and Processors, Technical and Organisational Measures (TOMs)

Understanding the Role of PETs and PPTs in the Digital Age

Controllers and Processors, Technical and Organisational Measures (TOMs)

Privacy Impact Assessment Tool by the Australian Government

Controllers and Processors, Data Protection Impact Assessment (DPIA)

SME Guide on Information Security Controls by European Digital SME Alliance

Controllers and Processors, Technical and Organisational Measures (TOMs)

Guidelines for evaluating differential priavacy gurantees by NIST

Anonymisation, Controllers and Processors, Technical and Organisational Measures (TOMs)

DPIA for AI template

Controllers and Processors, Data Protection Impact Assessment (DPIA)

AI and Data Protection Risk Toolkit by UK ICO

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Audit Requirements for Personal Data Processing Activities involving AI by AEPD

Controllers and Processors, Data Protection Impact Assessment (DPIA), Technical and Organisational Measures (TOMs)

Bulgarian CPPD Newsletter

Children as data subjects, Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Human rights Impact Assessments for AI

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Baseline Cyber Security for SMEs

Controllers and Processors, Technical and Organisational Measures (TOMs)

Case C-60/22

Accountability, Controllers and Processors, Joint Controllers, Principles

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

NIST Special Publication_1800: Implementing a Zero Trust Architecture

Technical and Organisational Measures (TOMs)

CNIL open source PIA software – data protection impact assessment

Data Protection Impact Assessment (DPIA)

Frequently Asked Questions (FAQ) NIS2 in Belgium by Centre for cybersecurity Belgium

Technical and Organisational Measures (TOMs)

Final State of Texas v Meta Order 2024

Facial Recognition, Specific processing situations

Data protection impact assessment for AI Solutions by Danish DPA

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR by EDPB

Facial Recognition, Specific processing situations

Data protection impact assessment on the processing of personal data on government Facebook Pages

Controllers and Processors, Data Protection Impact Assessment (DPIA)

EO 13800 on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

Technical and Organisational Measures (TOMs)

Cybersecurity panel session: SME Focus by the UK ICO

Technical and Organisational Measures (TOMs)

Cybersecurity panel session: Supply chain attacks by the UK ICO

Technical and Organisational Measures (TOMs)

Cybersecurity panel session: An introduction to incident response, common cyber threats and ways to mitigate risk by the UK ICO

Technical and Organisational Measures (TOMs)

Human rights Impact Assessments for AI by Access Now

AI, Data Protection Impact Assessment (DPIA)

Guide to Data Protection Impact Assessments by PDPC Singapore

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessments (DPIA) Template by UK ICO

Data Protection Impact Assessment (DPIA)

How to manage DPIAs by Data Protection Network (DPN)

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessment (DPIAs) by APDCAT

Data Protection Impact Assessment (DPIA)

Guide to Data Protection Impact Assessments (DPIAs) by the Irish DPC

Data Protection Impact Assessment (DPIA)

GDPR Risk Assessment by the AEPD

Data Protection Impact Assessment (DPIA)

Guide to Accountability and Governance | UK ICO

Accountability

Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Knowledge Bases by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Methodology by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Methodology Mindmap by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment – Internet of Things Devices (CNIL)

Data Protection Impact Assessment (DPIA)

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

The NSW AI Assessment Framework

Controllers and Processors, Data Protection Impact Assessment (DPIA)

AI Possible Risks & Mitigations Optical Character Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI Possible Risks & Mitigations Named Entity Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

5310-C Privacy Threshold Assessments and Privacy Impact Assessments by Office of Information Security

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Technical and organisational measures signed by Superhosting.bg

Controllers and Processors, Technical and Organisational Measures (TOMs)

Technical and Organizational Measures by Adobe Cloud Services

Controllers and Processors, Technical and Organisational Measures (TOMs)

Technical Recommendations on the use of APIs by CNIL

Controllers and Processors, Technical and Organisational Measures (TOMs)

AI and Data Protection risk toolkit by the UK ICO

AI, Data Protection Impact Assessment (DPIA)

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

Risk Management and Impact Assessment (DPIA) by AEPD

Data Protection Impact Assessment (DPIA)