Resources

Decision by German Federal Court of Justice (BGH) on case against Facebook for data scraping incident (german)

Civil Liability and Damages, Data scraping, Liability and Remedies

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

UK’s New Data Use Bill: Easier Access and Enhanced Privacy for All

Local Laws

Spanish Data Protection Authority (aepd)-ALTERNATIVA CORELLANA INDEPENDIENTE (6/26/2024)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Municipality of Nepi (6/20/2024)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/18/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (4/15/2024)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BEST ELAN ONLINE SRL (8/6/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CONSULTORÍA PERITACIONES ALMERIENSES, S.L (4/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CLÍNICA PARÍS, S.L. (2024-03-021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TELEFÓNICA DE ESPAÑA, S.A.U. (2/23/2024)

Administratives Measures, Liability and Remedies

Austrian Data Protection Authority (dsb)-Website operator (1/4/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies, Right to Erasure

Spanish Data Protection Authority (aepd)-WATIUM S.L. (5/22/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CORPORACIÓN DUAL GRUPO LC, S.L. (3/15/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DENTAL REY-GAR, S.L. (3/7/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-INFORMÁTICA MÉDICA, S.L. (11/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ALPHA BANK ROMANIA SA. (4/23/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-20 MINUTOS EDITORA, S.L. (3/25/2024)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-NTT Data Italia S.P.A (2/8/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-HISPAPOST, S.A. (2/1/2024)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ATLAS ENTERTAINMENT, S.L. (1/11/2024)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Municipality of Salento (1/24/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (12/30/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (11/17/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sectorul 1 al Municipiului București (1/30/2024)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Garðabær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Hafnarfjörður (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Kópavogur (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-ALBEN AIRPORT FACILITIES S.L. (10/11/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Unknown (11/16/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/30/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-UPMOBILE SOLUTIONS, S.L. (10/26/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (12/15/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Reykjanesbær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavik (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Libra Internet Bank SA (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TRACTAMENT D’AIGUES TEIA, S.L. (11/13/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (10/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/6/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UAT Comuna Albeni (9/25/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Autostrade per l’Italia spa (6/22/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-RING RING CLIN S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-MULTIGAS ASESORES S.L. (8/28/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (8/1/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (6/21/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Birou Gas, S.L. (7/12/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-La Risorsa Umana.it s.r.l. (3/23/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-TRC TRUCKS 2020, S.L. (6/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-PUNTO ROJO LIBROS, S.L. (6/29/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Ama S.p.a. (4/27/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Unknown (6/14/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (6/7/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (5/25/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-NORDETIA CLINICS IBERIA, S.L. (5/24/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-WILLOUGHBY COLLEGE, S.A (5/17/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Apollo Salon S.R.L. (6/6/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Razmataz Live s.r.l.. (3/2/2023)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Data Protection Authority of Brandenburg-Bank (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Data Protection Authority of Brandenburg-Aid organization (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-SECURITAS DIREC ESPAÑA, S.A. (4/21/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-INMARAN ASESORES S.L. (3/24/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Italian Data Protection Authority (Garante)-Verizon Connect Italy S.p.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Deputy Data Protection Ombudsman-Suomen Asiakastieto Oy (2/17/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Tecnomed Trento s.r.l. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-PRINTAFORM Ltd. (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Unknown (Unknown)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (12/29/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-EDITORIAL RIBADEO S.L. (1/13/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Societatea Energetică Electrica S.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (12/27/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Data Protection Authority of Ireland-Slane Credit Union Ltd. (1/26/2022)

Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES, S.L. (11/25/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Das Sense Society SRL (11/9/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association Bld. Pipera 1-2E (11/18/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Ginosa municipality (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Acqua Novara.VCO S.p.a. (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Materiale Constructii Online SRL (10/18/2022)

Administratives Measures, Liability and Remedies

Hellenic Data Protection Authority (HDPA)-EDYTE SA (9/6/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-Company (10/9/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Polish National Personal Data Protection Office (UODO)-Sułkowice Cultural Center (9/7/2022)

Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-SOLIVESA MASTER FRANCHISE S.L. (8/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alpha Bank Romania SA (8/29/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Norwegian Supervisory Authority (Datatilsynet)-Recover AS (8/25/2022)

Lawfulness of Processing, Public Interests

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-E Software Concept SRL (7/7/2022)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-ESVETEL, S.L. (7/22/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (7/19/2022)

Administratives Measures, Liability and Remedies

Norwegian Supervisory Authority (Datatilsynet)-Arbeidstilsynet (5/16/2022)

Lawfulness of Processing, Public Interests

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Wens Experience SRL (6/8/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (6/3/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Deputy Data Protection Ombudsman-Telemarketing company (4/29/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-LORIS FUEL SHOP SRL (5/12/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-RAMONA FILMS, S.L. (5/17/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Alfa Shipyard s.r.l. (3/10/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-ISWEB S.p.A. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (5/3/2022)

Administratives Measures, Liability and Remedies

French Data Protection Authority (CNIL)-DEDALUS BIOLOGIE (4/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-FLORAQUEEN FLOWERING THE WORLD S.L. (4/18/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DOOR2DOOR SPAIN, S.L. (4/19/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Scanshare S.r.l. (2/10/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Fortum Marketing and Sales Polska S.A. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design

Polish National Personal Data Protection Office (UODO)-PIKA Sp. z o.o. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Property owners’ association (4/7/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-MALAGATROM, S.L.U. (2/22/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-SEGURCAIXA ADESLAS, S.A. DE SEGUROS Y REASEGUROS (2/4/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Hamburg-Clearview AI Inc. (7/12/1905)

Administratives Measures, Liability and Remedies

French Data Protection Authority (CNIL)-SLIMPAY (12/28/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Hellenic Data Protection Authority (HDPA)-One Way Private Company (12/8/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Nobiotic Pharma SRL (12/13/2021)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Valoris Center S.R.L. (11/26/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-FUENSANTA S.L. (11/23/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-MERCEDES GERENCIA, S.L. (10/25/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-AD735 DATA MEDIA ADVERTISING S.L. (11/12/2021)

Administratives Measures, Liability and Remedies

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-aiComply S.r.l. (6/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Actamedica SRL (8/24/2021)

Controllers and Processors, Data Breaches, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Marbella Resorts S.L. (7/6/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Data Protection Authority of Bavaria-Unknown (7/12/1905)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (5/25/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners Association of Iasi Municipality (5/19/2021)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/26/2021)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Lugera & Makler Broker S.R.L. (4/19/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Natural person holding the position of General Secretary for a political party in Bucharest (3/4/2021)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Krajowa Szkoła Sądownictwa i Prokuratury (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vamavi Phone S.L. (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. Amsterdam – Bucharest office (2/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/1/2021)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Azienda Unità Sanitaria Locale Toscana Sud Est (12/17/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. C&V Water Control S.A. (12/22/2020)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Anmavas 61, S.L. (11/18/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (10/20/2020)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) (9/30/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Iberia Lae SA Operadora Unipersonal (7/20/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/23/2020)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (6/4/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SOS Infertility Association (3/25/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/25/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Telefónica (3/18/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/9/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (12/16/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Modern Barber (11/26/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Nicola Medical Team 17 SRL (12/2/2019)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Major of Aleksandrów Kujawski (10/18/2019)

Controllers and Processors, Data Processing Agreement (DPA)

Data Protection Authority of Hamburg-Kolibri Image Regina und Dirk Maass GbR (12/17/2018)

Controllers and Processors, Data Processing Agreement (DPA)

C-340/21

Controllers and Processors, Liability and Remedies, Supervisory Authorities, Technical and Organisational Measures (TOMs)

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive |EPDB

Adequacy Decisions, Data Transfers

Case ZWO 22/775, Overijssel District, Netherlands

Liability and Remedies, Supervisory Authorities

GDPR: a culture of non-compliance? Numbers of evidence-based enforcement efforts by nyob

Liability and Remedies, Supervisory Authorities

CASE STUDIES (2018 – 2023) by the Irish DPC

Access Requests (DSAR), Controllers and Processors, Data Breaches, Data Subjects Rights, Liability and Remedies, Supervisory Authorities

GUIDELINES CLOCKING AND ATTENDANCE CONTROL PROCESSING USING BIOMETRIC SYSTEMS BY THE AEPD

Employment, Principles, Sensitive Data, Specific processing situations

Report on the first review of the functioning of the adequacy decisions adopted pursuant to Article 25(6) of Directive 95/46/EC

Adequacy Decisions, Data Transfers

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

Liability and Remedies, Supervisory Authorities

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

[Draft] Guidelines on the processing of personal data in regard to employment by the UK ICO

Employment, Specific processing situations

Practical Guide on Controller to Processor Contracts by the Irish DPC

Controllers and Processors, Data Processing Agreement (DPA)

Everything Recruiters Need to Know About GDPR by ZOHO

Employment, Specific processing situations

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Remedies, Supervisory Authorities

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Liability and Remedies, Supervisory Authorities

Opinion on processing of CCTV data in regard to employee performance analytics by the Bulgarian DPA

CCTV, Employment, Specific processing situations

AUTOMATED DECISIONMAKING TECHNOLOGY REGULATIONS (DRAFT) by CPPA

Automated Decision-making, Controllers and Processors

Protection of workers’ personal data: General principles by ILO

Employment, Specific processing situations

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Data protection and monitoring workers

Employment, Specific processing situations

Infographic DPC TikTok Fine

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Fairness, Liability and Remedies, Principles, Supervisory Authorities

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-496/17

Lawfulness of Processing, Public Interests

C-34/21

Employment, Specific processing situations

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-306/21

Lawfulness of Processing, Public Interests

C-300/21

Liability and Remedies, Supervisory Authorities

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Guidelines scraping by private organizations and individuals by the Dutch Data Protection Authority

Automated Decision-making, Controllers and Processors

Information note by EDPB on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023

Adequacy Decisions, Data Transfers

Opinion 14/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the United Kingdom |EPDB

Adequacy Decisions, Data Transfers

Opinion 15/2021 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data in the United Kingdom |EDPB

Adequacy Decisions, Data Transfers

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EDPB

Adequacy Decisions, Data Transfers

Information Note by EDPB on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national security

Adequacy Decisions, Data Transfers

EU-US Data Privacy Framework Template Complaint Form for Submitting Commercial Related Complaints to EU DPAs by EDPB

Adequacy Decisions, Data Transfers

Data Protection Fining Guidelines by UK ICO

Liability and Remedies, Supervisory Authorities

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EPDB

Adequacy Decisions, Data Transfers

Opinion 5/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework |EPDB

Adequacy Decisions, Data Transfers

How to deal with SARs as an employer by the UK ICO

Access Requests (DSAR), Employment

GenAI and data protection: how organisations and their employees can use it appropriately and lawfully

AI, Employment

Guidance Note: Employer Vehicle Tracking | Irish DPC

Employment

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

Data Sharing Code | UK ICO

Data Processing Agreement (DPA)

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

Automated Decision-making

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Liability and Remedies, Supervisory Authorities

COMMISSION IMPLEMENTING DECISION of 10.7.2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework

Adequacy Decisions, Data Transfers

Guidelines 04/2022 on the calculation of administrative fines under the GDPR

Liability and Remedies

Automated Decision-Making in Online Platforms: Protection Against Discrimination and Manipulation of Behavior

Automated Decision-making, Controllers and Processors

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Rules of Procedure for the “Informal Panel of EU DPAs”according to the EU-US Data Privacy Framework by EDPB

Adequacy Decisions, Data Transfers

Template Complaint Form to the U.S. Office of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) by EDPB

Adequacy Decisions, Data Transfers

SUPERIOR COURT OF THE STATE OF CALIFORNIA COUNTY OF LOS ANGELES Case No. BC492959

Liability and Remedies

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

Automated Decision-making

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Remedies

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

The Employment Practices Code | UK ICO

Data Subjects Rights, Employment

GDPR Fines Tracker

Liability and Remedies, Supervisory Authorities