Resources

Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

Standard contractual clauses for EU-EEA by EU

Standard Contractual Clauses (SCC)

Standard contractual clauses for international transfers by EU

Data Transfers, Standard Contractual Clauses (SCC)

Decision by German Federal Court of Justice (BGH) on case against Facebook for data scraping incident (german)

Civil Liability and Damages, Data scraping, Liability and Remedies

WhatsApp Data-Sharing Ban in India: Meta Faces $25.4M Fine

Data Sharing

AEPD (Spain) – EXP202315853 against Ibercaja Banco

Lawfulness of Processing, Performance of Contract

Data Broker Sells Voter Data on Support for QAnon and January 6

Data Sharing

Data Sharing Toolkit Tracker

Data Sharing

Data Sharing Toolkit Tracker – more information about the Toolkit by UK ICO

Data Sharing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Rețele Electrice Muntenia SA. (6/25/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Rețele Electrice Dobrogea SA (6/25/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-IRIDEX GROUP SALUBRIZARE SRL (5/9/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MEDICOVER SRL (5/9/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-CENTRUL MEDICAL UNIREA SRL (5/8/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-VESTA CEU ROMÂNIA SRL. (2/26/2024)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Veranda Obor S.A. (12/11/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Cez Vânzare S.A. (10/2/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank NV Amsterdam Sucursala București (7/18/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Artima S.A. (6/15/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Lawfulness of Processing, Performance of Contract

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Lawfulness of Processing, Performance of Contract

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tinmar Energy SA (3/14/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Centrul Medical dr. Furtună Dan (3/16/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Med Life S.A. (3/16/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Apă Canal Ilfov SA (1/4/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BRISTOL LOGISTICS SA (1/12/2023)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Medicover S.R.L. (11/24/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Performance of Contract, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Realmedia Network SA (9/8/2022)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Wine Point S.R.L. (6/15/2022)

Lawfulness of Processing, Performance of Contract

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Interactions Marketing SRL (6/20/2022)

Lawfulness of Processing, Performance of Contract

Norwegian Supervisory Authority (Datatilsynet)-Lillestrøm Municipality (2/2/2022)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Vodafone România SA (11/14/2021)

Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Spanish Data Protection Authority (aepd)-Creator Energy S.L. (6/4/2021)

Performance of Contract

Norwegian Supervisory Authority (Datatilsynet)-Asker Municipality (3/15/2021)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Ålesund Municipality (3/15/2021)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Alterna Operador Integral S.L. (1/21/2021)

Performance of Contract

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) (12/16/2020)

Controllers and Processors, Data Breaches, Lawfulness of Processing, Performance of Contract, Principles, Privacy by Design

New data protection audit framework launched to help organisations improve compliance by UK ICO

Controllers and Processors, Data Sharing, Data Subjects Rights

Telegram’s New Policy: User Data to Be Shared with Authorities in Criminal Cases

Data Sharing, Data Subjects Rights

LinkedIn Used User Data for AI Training Before Updating Its Terms

AI, Data Sharing, Data Subjects Rights, Lawfulness of Processing

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

THE NEW STANDARD CONTRACTUAL CLAUSES – QUESTIONS AND ANSWERS

Data Transfers, Standard Contractual Clauses (SCC)

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

AUTOMATED DECISIONMAKING TECHNOLOGY REGULATIONS (DRAFT) by CPPA

Automated Decision-making, Controllers and Processors

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

Joined Cases C-511/18, C-512/18 and C-520/18

Criminal Convictions and Offences, National Security, Principles, Specific processing situations

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-252/21

Lawfulness of Processing, Performance of Contract, Principles, Sensitive Data

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

Frequently Asked Questions (FAQs) on the Data Act by the EU Commission

Controllers and Processors, Data Sharing

Meta Platforms Ireland v EDPB (Case T-319/24)

Controllers and Processors, Data Sharing, Data Subjects Rights

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Guidelines scraping by private organizations and individuals by the Dutch Data Protection Authority

Automated Decision-making, Controllers and Processors

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

Opinion 20/2021 on Tobacco Traceability System |EDPB

Controllers and Processors, Data Sharing

Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR) |EDPB

Controllers and Processors, Data Transfers, Standard Contractual Clauses (SCC)

Data Sharing Code of Practice by UK ICO [Controller to Controller]

Controllers and Processors, Data Sharing

Guidelines on Automated individual decision-making and Profiling for the purposes of Regulation 2016/679

Automated Decision-making

Joint Guide to ASEAN MCC and EU SCC

Data Transfers, Standard Contractual Clauses (SCC)

Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects

Performance of Contract

Automated Decision-Making in Online Platforms: Protection Against Discrimination and Manipulation of Behavior

Automated Decision-making, Controllers and Processors

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

Automated Decision-making

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management