Resources

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

French Data Protection Authority (CNIL)-Municipality of Korou (7/22/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hessen-Company (7/15/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Hellenic Data Protection Authority (HDPA)-Ministry of Rural Development and Food (1/29/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Municipality of Athens (1/29/2024)

Controllers and Processors, Cooperation with Supervisory Authorithy

Austrian Data Protection Authority (dsb)-Unknown (12/12/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Unknown (12/7/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/21/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

French Data Protection Authority (CNIL)-Company (12/22/2023)

Principles, Purpose limitation

French Data Protection Authority (CNIL)-Kourou municipality (12/12/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

French Data Protection Authority (CNIL)-SAF LOGISTICS (9/18/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data minimisation, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (1/25/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (6/2/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Website operator (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy, Lawfulness of Processing

Hellenic Data Protection Authority (HDPA)-ΜΑΡΙΑ ΠΕΔΙΩΤΗ ΚΑΙ ΣΙΑ Ο.Ε. (12/19/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Intellexa SA (1/13/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy

Polish National Personal Data Protection Office (UODO)-Unknown (8/31/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (3/23/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Spanish Data Protection Authority (aepd)-Bar owner (7/19/2022)

Principles, Purpose limitation

Cypriot Data Protection Commissioner-Oroklini Municipal Council (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Physician (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Cyprus Judo Federation (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Hellenic Data Protection Authority (HDPA)-Pediatric psychologist (6/29/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy

Data Protection Authority of Hessen-Restaurant (7/13/1905)

Principles, Purpose limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Mediterranean Hospital of Cyprus (9/17/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Pactum Poland Sp. z o.o. (12/1/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Data Protection Authority of Hamburg-Company (7/12/1905)

Definitions, Joint Controllers

Austrian Data Protection Authority (dsb)-Unknown (2/12/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bar owner (9/28/2021)

Principles, Purpose limitation

Information Commissioner of Isle of Man-Cosmetic Medical Limited (12/11/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy

French Data Protection Authority (CNIL)-Société nouvelle de l’annuaire français (9/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-PNP S.A. (4/27/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-La Santrade S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Funeda Sp. z o.o. (3/19/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Dreamtime Call S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Certime S.A. (3/15/2021)

Principles, Purpose limitation

Polish National Personal Data Protection Office (UODO)-Anwara Sp. z.o.o. (1/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Cypriot Real Estate Registration Authority (3/3/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Smart Cities Sp. z o.o. (12/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (11/6/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy

Polish National Personal Data Protection Office (UODO)-Entrepreneur running a non-public nursery and pre-school (6/3/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de proprietari Militari R (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Party of the Socialists of Catalonia (8/17/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bankia S.A. (8/28/2020)

Principles, Purpose limitation

Polish National Personal Data Protection Office (UODO)-Office for geodesy and cartography (7/15/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/2/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-East Power Sp. z o.o. (7/10/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Unknown (6/16/2020)

Access Requests (DSAR), Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Vis Consulting Sp. z o.o. (3/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Belgian Data Protection Authority (APD)-Proximus SA (4/28/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Representative

Commission for Personal Data Protection (KZLD)-B.D. (10/7/2019)

Controllers and Processors, Cooperation with Supervisory Authorithy

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (10/16/2019)

Controllers and Processors, Cooperation with Supervisory Authorithy

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Chief Information Security Officer_ HANDBOOK

Risk Management

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Risk Management

Case C‑604/22

Joint Controllers, Personal Data

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

Risk Management

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Remedies, Supervisory Authorities

C-77/21

Principles, Purpose limitation

Case C-60/22

Accountability, Controllers and Processors, Joint Controllers, Principles

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Risk Management

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

Board of Directors Handbook for Cloud Risk Governance | Google

Risk Management

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management