Resources

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

Decision by German Federal Court of Justice (BGH) on case against Facebook for data scraping incident (german)

Civil Liability and Damages, Data scraping, Liability and Remedies

OH Digitale Dienste version 1.2 by German data protection authority

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Spanish Data Protection Authority (aepd)-ALTERNATIVA CORELLANA INDEPENDIENTE (6/26/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/18/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (4/15/2024)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BEST ELAN ONLINE SRL (8/6/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CONSULTORÍA PERITACIONES ALMERIENSES, S.L (4/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CLÍNICA PARÍS, S.L. (2024-03-021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TELEFÓNICA DE ESPAÑA, S.A.U. (2/23/2024)

Administratives Measures, Liability and Remedies

Austrian Data Protection Authority (dsb)-Website operator (1/4/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies, Right to Erasure

Spanish Data Protection Authority (aepd)-WATIUM S.L. (5/22/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CORPORACIÓN DUAL GRUPO LC, S.L. (3/15/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DENTAL REY-GAR, S.L. (3/7/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-20 MINUTOS EDITORA, S.L. (3/25/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ATLAS ENTERTAINMENT, S.L. (1/11/2024)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Municipality of Salento (1/24/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (12/30/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (11/17/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sectorul 1 al Municipiului București (1/30/2024)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-ALBEN AIRPORT FACILITIES S.L. (10/11/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Unknown (11/16/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/30/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-UPMOBILE SOLUTIONS, S.L. (10/26/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (12/15/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Libra Internet Bank SA (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TRACTAMENT D’AIGUES TEIA, S.L. (11/13/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (10/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/6/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UAT Comuna Albeni (9/25/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-RING RING CLIN S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-MULTIGAS ASESORES S.L. (8/28/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (8/1/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (6/21/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Birou Gas, S.L. (7/12/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TRC TRUCKS 2020, S.L. (6/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-PUNTO ROJO LIBROS, S.L. (6/29/2023)

Administratives Measures, Liability and Remedies

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Unknown (6/14/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (6/7/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (5/25/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-NORDETIA CLINICS IBERIA, S.L. (5/24/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-WILLOUGHBY COLLEGE, S.A (5/17/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Apollo Salon S.R.L. (6/6/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-SECURITAS DIREC ESPAÑA, S.A. (4/21/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-INMARAN ASESORES S.L. (3/24/2023)

Administratives Measures, Liability and Remedies

Deputy Data Protection Ombudsman-Suomen Asiakastieto Oy (2/17/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Unknown (Unknown)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (12/29/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-EDITORIAL RIBADEO S.L. (1/13/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES, S.L. (11/25/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Das Sense Society SRL (11/9/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association Bld. Pipera 1-2E (11/18/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Materiale Constructii Online SRL (10/18/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Company (10/9/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Norwegian Supervisory Authority (Datatilsynet)-Recover AS (8/25/2022)

Lawfulness of Processing, Public Interests

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-E Software Concept SRL (7/7/2022)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (7/19/2022)

Administratives Measures, Liability and Remedies

Norwegian Supervisory Authority (Datatilsynet)-Arbeidstilsynet (5/16/2022)

Lawfulness of Processing, Public Interests

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Deputy Data Protection Ombudsman-Telemarketing company (4/29/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-RAMONA FILMS, S.L. (5/17/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Alfa Shipyard s.r.l. (3/10/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (5/3/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-FLORAQUEEN FLOWERING THE WORLD S.L. (4/18/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DOOR2DOOR SPAIN, S.L. (4/19/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Property owners’ association (4/7/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-MALAGATROM, S.L.U. (2/22/2022)

Administratives Measures, Liability and Remedies

Data Protection Authority of Hamburg-Clearview AI Inc. (7/12/1905)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Nobiotic Pharma SRL (12/13/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-FUENSANTA S.L. (11/23/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-MERCEDES GERENCIA, S.L. (10/25/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-AD735 DATA MEDIA ADVERTISING S.L. (11/12/2021)

Administratives Measures, Liability and Remedies

Data Protection Authority of Bavaria-Unknown (7/12/1905)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners Association of Iasi Municipality (5/19/2021)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/26/2021)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Natural person holding the position of General Secretary for a political party in Bucharest (3/4/2021)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/1/2021)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. C&V Water Control S.A. (12/22/2020)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Anmavas 61, S.L. (11/18/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (10/20/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Iberia Lae SA Operadora Unipersonal (7/20/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/23/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (6/4/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SOS Infertility Association (3/25/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/25/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Telefónica (3/18/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/9/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (12/16/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Modern Barber (11/26/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Nicola Medical Team 17 SRL (12/2/2019)

Administratives Measures, Liability and Remedies

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Annex: A summary of the Transparency in Health and Social Care guidance impact assessment by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Transparency in health and social care by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-496/17

Lawfulness of Processing, Public Interests

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-306/21

Lawfulness of Processing, Public Interests

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Guidelines on transparency under Regulation 2016/679

Transparency

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Guidelines 07/2022 on certification as a tool for transfers

Certification

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests