Resources

Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

Decision by German Federal Court of Justice (BGH) on case against Facebook for data scraping incident (german)

Civil Liability and Damages, Data scraping, Liability and Remedies

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Spanish Data Protection Authority (aepd)-ALTERNATIVA CORELLANA INDEPENDIENTE (6/26/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/18/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (4/15/2024)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BEST ELAN ONLINE SRL (8/6/2024)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Corint Logistic SRL. (5/30/2024)

Access Requests (DSAR), Data Subjects Rights, Lawfulness of Processing, Principles, Right to Object, Sensitive Data

Spanish Data Protection Authority (aepd)-CONSULTORÍA PERITACIONES ALMERIENSES, S.L (4/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-CLÍNICA PARÍS, S.L. (2024-03-021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TELEFÓNICA DE ESPAÑA, S.A.U. (2/23/2024)

Administratives Measures, Liability and Remedies

Austrian Data Protection Authority (dsb)-Website operator (1/4/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies, Right to Erasure

Spanish Data Protection Authority (aepd)-WATIUM S.L. (5/22/2024)

Administratives Measures, Liability and Remedies

Data Protection Authority of Hessen-Company (7/15/1905)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-CORPORACIÓN DUAL GRUPO LC, S.L. (3/15/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DENTAL REY-GAR, S.L. (3/7/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (2/19/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-20 MINUTOS EDITORA, S.L. (3/25/2024)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ATLAS ENTERTAINMENT, S.L. (1/11/2024)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Municipality of Salento (1/24/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (12/30/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (11/17/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/20/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sectorul 1 al Municipiului București (1/30/2024)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

French Data Protection Authority (CNIL)-Candidate for parliamentary elections (12/22/2023)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-ALBEN AIRPORT FACILITIES S.L. (10/11/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Unknown (11/16/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/30/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-UPMOBILE SOLUTIONS, S.L. (10/26/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (12/15/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Libra Internet Bank SA (11/20/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-TRACTAMENT D’AIGUES TEIA, S.L. (11/13/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (10/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (11/6/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UAT Comuna Albeni (9/25/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-NN Asigurări de Viață S.A. (9/18/2023)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-RING RING CLIN S.L. (8/11/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-MULTIGAS ASESORES S.L. (8/28/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (8/1/2023)

Administratives Measures, Liability and Remedies

Polish National Personal Data Protection Office (UODO)-Company (6/21/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-CONCENTRA CENTRAL DE COMPRAS Y SERVICIOS S.L. (6/7/2023)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-Birou Gas, S.L. (7/12/2023)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Grizzaffi Management Srl (5/17/2023)

Data Subjects Rights, Lawfulness of Processing, Right to Object

Spanish Data Protection Authority (aepd)-TRC TRUCKS 2020, S.L. (6/27/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-PUNTO ROJO LIBROS, S.L. (6/29/2023)

Administratives Measures, Liability and Remedies

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Data State Inspectorate (DSI)-Unknown (7/14/1905)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Unknown (6/14/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-LEADDESK, S.L (6/7/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Private individual (5/25/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-NORDETIA CLINICS IBERIA, S.L. (5/24/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-WILLOUGHBY COLLEGE, S.A (5/17/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Apollo Salon S.R.L. (6/6/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-SECURITAS DIREC ESPAÑA, S.A. (4/21/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ECOMM MOVADGENCY S.L. (2/28/2023)

Data Subjects Rights, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tensa Art Design SRL (4/4/2023)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-INMARAN ASESORES S.L. (3/24/2023)

Administratives Measures, Liability and Remedies

Deputy Data Protection Ombudsman-Suomen Asiakastieto Oy (2/17/2023)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tensa Art Design SA (2/1/2023)

Data Subjects Rights, Right to Object

Polish National Personal Data Protection Office (UODO)-Unknown (Unknown)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Spanish Data Protection Authority (aepd)-ADENET SYSTEMS, S.L. (12/29/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-EDITORIAL RIBADEO S.L. (1/13/2023)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES, S.L. (11/25/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-XASTRE DO PETO, S.L. (11/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Das Sense Society SRL (11/9/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association Bld. Pipera 1-2E (11/18/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Materiale Constructii Online SRL (10/18/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Company (10/9/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Norwegian Supervisory Authority (Datatilsynet)-Recover AS (8/25/2022)

Lawfulness of Processing, Public Interests

French Data Protection Authority (CNIL)-ACCOR SA (8/19/2022)

Access Requests (DSAR), Data Subjects Rights, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-E Software Concept SRL (7/7/2022)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sephora Cosmetics România SA (8/4/2022)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-Private individual (7/19/2022)

Administratives Measures, Liability and Remedies

French Data Protection Authority (CNIL)-TotalEnergies Electricité et Gaz France (6/23/2022)

Data Subjects Rights, Right to Object

Norwegian Supervisory Authority (Datatilsynet)-Arbeidstilsynet (5/16/2022)

Lawfulness of Processing, Public Interests

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Company (3/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Deputy Data Protection Ombudsman-Telemarketing company (4/29/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-RAMONA FILMS, S.L. (5/17/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-Alfa Shipyard s.r.l. (3/10/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (5/3/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-FLORAQUEEN FLOWERING THE WORLD S.L. (4/18/2022)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-DOOR2DOOR SPAIN, S.L. (4/19/2022)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Property owners’ association (4/7/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-IAMSAT Muntenia SA (2/22/2022)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-MALAGATROM, S.L.U. (2/22/2022)

Administratives Measures, Liability and Remedies

Italian Data Protection Authority (Garante)-T.S.M. s.r.l. (1/27/2022)

Data Subjects Rights, Right to Object

Italian Data Protection Authority (Garante)-Aimon Srl (11/25/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative, Right to Object

Data Protection Authority of Hamburg-Clearview AI Inc. (7/12/1905)

Administratives Measures, Liability and Remedies

French Data Protection Authority (CNIL)-FREE MOBILE (12/28/2021)

Data Subjects Rights, Principles, Privacy by Design, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Nobiotic Pharma SRL (12/13/2021)

Administratives Measures, Liability and Remedies

Hellenic Data Protection Authority (HDPA)-ΚΑΠΑ ΛΑΜΔΑ ΩΜΕΓΑ ΔΙΑΦΗΜΙΣΤΙΚΗ ΕΜΠΟΡΙΚΗ ΜΟΝΟΠΡΟΣΩΠΗ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ (10/14/2021)

Data Subjects Rights, Lawfulness of Processing, Right to Object

Spanish Data Protection Authority (aepd)-FUENSANTA S.L. (11/23/2021)

Administratives Measures, Liability and Remedies

Hellenic Data Protection Authority (HDPA)-PREMIUMMEDIA ΠΑΡΑΓΩΓΗ ΟΠΤΙΚΟ-ΑΚΟΥΣΤΙΚΩΝ ΕΡΓΩΝ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΙΑ (10/4/2021)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-MERCEDES GERENCIA, S.L. (10/25/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-AD735 DATA MEDIA ADVERTISING S.L. (11/12/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/19/2021)

Data Subjects Rights, Right to Object

Data Protection Authority of Ireland-Vodafone Ireland Limited (9/7/2021)

Data Subjects Rights, Right to Object

Data Protection Authority of Bavaria-Unknown (7/12/1905)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners Association of Iasi Municipality (5/19/2021)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/26/2021)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Promotech Digital S.L. (4/6/2021)

Data Subjects Rights, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Natural person holding the position of General Secretary for a political party in Bucharest (3/4/2021)

Administratives Measures, Liability and Remedies, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/1/2021)

Administratives Measures, Liability and Remedies

French Data Protection Authority (CNIL)-Perfomeclic (12/7/2020)

Data minimisation, Data Subjects Rights, Principles, Right to Object, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. C&V Water Control S.A. (12/22/2020)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Anmavas 61, S.L. (11/18/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (10/20/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Tour & People Max S.L. (7/31/2020)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-Iberia Lae SA Operadora Unipersonal (7/20/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/23/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-De Vere Spain S.L. (7/2/2020)

Data Subjects Rights, Right to Object

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (6/4/2020)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SOS Infertility Association (3/25/2020)

Administratives Measures, Liability and Remedies

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/25/2020)

Administratives Measures, Liability and Remedies

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Financial Enterprise (6/26/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Telefónica (3/18/2020)

Administratives Measures, Liability and Remedies

Data Protection Authority of Hamburg-Hamburger Volksbank eG (7/11/1905)

Data Subjects Rights, Right to Object

Italian Data Protection Authority (Garante)-Eni Gas e Luce (12/11/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Italian Data Protection Authority (Garante)-TIM (telecommunications operator) (1/15/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria S.L. (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/9/2020)

Administratives Measures, Liability and Remedies

Hellenic Data Protection Authority (HDPA)-Wind Hellas Telecommunications (10/18/2019)

Data Subjects Rights, Right to Object

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Globus Score SRL (12/16/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Modern Barber (11/26/2019)

Administratives Measures, Liability and Remedies

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Nicola Medical Team 17 SRL (12/2/2019)

Administratives Measures, Liability and Remedies

Hellenic Data Protection Authority (HDPA)-Telecommunication Service Provider (10/7/2019)

Data Subjects Rights, Right to Object

Data Protection Authority of Berlin-Delivery Hero (9/19/2019)

Access Requests (DSAR), Data Subjects Rights, Right to Object

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Chief Information Security Officer_ HANDBOOK

Risk Management

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Risk Management

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

Risk Management

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

One-Stop-Shop thematic case digest: RIGHT TO OBJECTAND RIGHT TO ERASURE

Data Subjects Rights, Right to Erasure, Right to Object

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-496/17

Lawfulness of Processing, Public Interests

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-306/21

Lawfulness of Processing, Public Interests

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

Case C‑461/22 CURIA

Data Controller, Definitions

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Risk Management

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

Guidelines 09/2020 on relevant and reasoned objection under Regulation 2016/679

Data Subjects Rights, Right to Object

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

Board of Directors Handbook for Cloud Risk Governance | Google

Risk Management

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management