Resources

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

OH Digitale Dienste version 1.2 by German data protection authority

Spanish Data Protection Authority (aepd)-Website operator (6/5/2024)

Principles, Storage limitation

Italian Data Protection Authority (Garante)-Innova Camara (4/11/2024)

Principles, Sensitive Data, Storage limitation

Deputy Data Protection Ombudsman-Verkkokauppa.com (3/6/2024)

Data Subjects Rights, Principles, Storage limitation

French Data Protection Authority (CNIL)-Company (12/22/2023)

Principles, Purpose limitation

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Athens Urban Transport Organization (9/25/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Storage limitation

Lithuanian Data Protection Authority (VDAI)-Company (4/20/2023)

Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Hotel (12/21/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Storage limitation

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (1/3/2023)

Principles, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

French Data Protection Authority (CNIL)-DISCORD INC. (11/10/2022)

Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Portuguese Data Protection Authority (CNPD)-Setúbal municipality (11/2/2022)

Principles, Sensitive Data, Storage limitation

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Company (10/9/2022)

Data Subjects Rights, Lawfulness of Processing, Public Interests

Hellenic Data Protection Authority (HDPA)-IDIKA SA (8/8/2022)

Data Subjects Rights, Principles, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

French Data Protection Authority (CNIL)-GIE INFOGREFFE (9/13/2022)

Data Subjects Rights, Principles, Storage limitation

Norwegian Supervisory Authority (Datatilsynet)-Recover AS (8/25/2022)

Lawfulness of Processing, Public Interests

National Commission for Data Protection (CNPD)-Company (6/30/2022)

Data Subjects Rights, Principles, Storage limitation

Spanish Data Protection Authority (aepd)-Bar owner (7/19/2022)

Principles, Purpose limitation

Danish Data Protection Authority (Datatilsynet)-Gyldendal A/S (6/22/2022)

Principles, Storage limitation

Norwegian Supervisory Authority (Datatilsynet)-Arbeidstilsynet (5/16/2022)

Lawfulness of Processing, Public Interests

Data Protection Authority of Hessen-Restaurant (7/13/1905)

Principles, Purpose limitation

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO SANSUEÑA, S.L. (10/5/2021)

Controllers and Processors, Principles, Representative, Storage limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Bar owner (9/28/2021)

Principles, Purpose limitation

French Data Protection Authority (CNIL)-SGAM AG2R LA MONDIALE (7/20/2021)

Data Subjects Rights, Principles, Storage limitation

National Commission for Data Protection (CNPD)-Unknown (4/8/2021)

Data Subjects Rights, Principles, Storage limitation

French Data Protection Authority (CNIL)-BRICO PRIVÉ (6/14/2021)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Certime S.A. (3/15/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Hellenic Bank (3/3/2021)

Controllers and Processors, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-University College Dublin (12/17/2020)

Controllers and Processors, Data Breaches, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Party of the Socialists of Catalonia (8/17/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bankia S.A. (8/28/2020)

Principles, Purpose limitation

Danish Data Protection Authority (Datatilsynet)-Arp Hansen Hotel Group A/S (7/28/2020)

Principles, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Danish Data Protection Authority (Datatilsynet)-Taxa 4×35 (7/11/1905)

Principles, Storage limitation

Danish Data Protection Authority (Datatilsynet)-IDdesign A / S (2/12/2021)

Controllers and Processors, Principles, Representative, Storage limitation

French Data Protection Authority (CNIL)-SERGIC (Real Estate) (5/28/2019)

Principles, Storage limitation

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

[Press release] Commission opens formal proceedings against X under the Digital Services Act

Digital Services Act

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-496/17

Lawfulness of Processing, Public Interests

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-77/21

Principles, Purpose limitation

C-306/21

Lawfulness of Processing, Public Interests

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests