Resources

WhatsApp Data-Sharing Ban in India: Meta Faces $25.4M Fine

Data Sharing

Slovenian SA Decision 0603-42/2023/12 against Dodo Pizza

CCTV, Lawfulness of Processing, Legitimate Interest

Data Broker Sells Voter Data on Support for QAnon and January 6

Data Sharing

Data Sharing Toolkit Tracker

Data Sharing

Data Sharing Toolkit Tracker – more information about the Toolkit by UK ICO

Data Sharing

Dutch Supervisory Authority for Data Protection (AP)-Clearview AI Inc. (5/16/2024)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (5/20/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Municipality of Nepi (6/20/2024)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Istituto Nazionale di Previdenza Sociale (4/11/2024)

Principles, Representative

Lithuanian Data Protection Authority (VDAI)-Vinted (7/2/2024)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Medical association (5/9/2024)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-I.N.P.A.S. (4/24/2024)

Controllers and Processors, Lawfulness of Processing, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Mas s.r.l. (4/13/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mas s.r.l.s. (4/13/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-Greek Ministry of Immigration and Asylum (4/2/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-CTC EXTERNALIZACIÓN, S.L (2/12/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Camera di Commercio Industria Artigianato e Agricoltura (2/22/2024)

Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Black Tiger Belgium (1/16/2024)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Istituto Comprensivo Statale “F.S. Cabrini (1/24/2024)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Municipality (1/24/2024)

Lawfulness of Processing, Principles, Representative, Sensitive Data

Dutch Supervisory Authority for Data Protection (AP)-International Card Services B.V. (1/15/2024)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Sirio S.p.A. (12/7/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-AMAZON FRANCE LOGISTIQUE (1/23/2024)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/7/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/21/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Homeowner administrator (10/26/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Region of Lombardy (10/26/2023)

Principles, Representative, Sensitive Data

Data Protection Authority of Sweden-Östersund Municipality’s Department for Children and Education (11/28/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (11/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Voorschoten municipality (11/2/2023)

Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Eurocollege Oxford English Institute S.L. (11/17/2023)

Controllers and Processors, Data minimisation, Principles, Representative, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Athens Urban Transport Organization (9/25/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Storage limitation

Italian Data Protection Authority (Garante)-Scionti Selezioni Superiori S.r.l. (10/12/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Compara Facile S.r.l. (7/18/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Croatian Data Protection Authority (azop)-Debt collection company (10/5/2023)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-GFB One s.r.l. (9/14/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-San Severo municipality (9/14/2023)

Lawfulness of Processing, Representative

Cypriot Data Protection Commissioner-Breikot Management Ltd (7/15/1905)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Private individual (7/18/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Cat s.r.l. (7/18/2023)

Principles, Representative

Italian Data Protection Authority (Garante)-Ermeslink di Giovanni Di Stefano (7/18/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (1/25/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Irish Departement of Health (6/16/2023)

Data minimisation, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Napoli (6/1/2023)

Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (6/2/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Università degli studi di Cassino e del Lazio Meridionale (4/27/2023)

Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (6/12/2023)

Lawfulness of Processing, Principles, Privacy by Design, Representative

Italian Data Protection Authority (Garante)-Ufficio Scolastico Regionale per la Puglia, Ufficio VI – Ambito Territoriale di Lecce (4/27/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Cogollo del Cengio (4/13/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda socio sanitaria locale n. 3 di Nuoro (4/13/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data State Inspectorate (DSI)-Company (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Nordrhein-Westfalen-Physician (7/14/1905)

Controllers and Processors, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda ULSS 6 Euganea (5/17/2023)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Berlin-Job center employee (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/14/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Private individual (4/27/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Data Protection Authority of Berlin-Private individual (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Restaurant operator (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Sports photography company (7/14/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-TIM S.p.A. (4/13/2023)

Accountability, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Compania Națională Poșta Română S.A. (5/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Credit institution (7/14/1905)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Razmataz Live s.r.l.. (3/2/2023)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-GSMA LTD. (5/3/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Italian Data Protection Authority (Garante)-Aesse S.r.l.s. (3/9/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Private individual (3/2/2023)

Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Hotel (12/21/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Storage limitation

Cypriot Data Protection Commissioner-Πολίτης newspaper (1/16/2023)

Controllers and Processors, Data minimisation, Principles, Representative

Austrian Data Protection Authority (dsb)-Operator of a public toilet (8/23/2022)

Lawfulness of Processing, Legitimate Interest, Sensitive Data

Spanish Data Protection Authority (aepd)-ALBERO FORTE COMPOSITE, S.L. (4/28/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Data Protection Authority of Brandenburg-Restaurant operator (7/14/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Misterbianco municipality (1/26/2023)

Principles, Representative

Data Protection Authority of Hamburg-Private individual (7/14/1905)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alianța pentru Unirea Românilor (3/15/2023)

Controllers and Processors, Data minimisation, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Attorney (2/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Ufficio Scolastico Regionale per la Lombardia, Ufficio IV – Ambito Territoriale di Brescia (1/11/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (3/27/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Data Protection Authority of Ireland-Centric Health Ltd. (1/23/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Italian Data Protection Authority (Garante)-Veneto region (10/6/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Verizon Connect Italy S.p.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Edison Energia S.p.A. (12/15/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Croatian Data Protection Authority (azop)-Telecommunications company (Unknown)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Monte Sant’Angelo (4/28/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Direzione Didattica Statale 1° Circolo-Eboli (4/28/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Mister Brick S.a.s. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

National Commission for Data Protection (CNPD)-Manager of a real estate co-ownership (12/13/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Company (8/23/2022)

Accuracy, Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Scuola Statale Secondaria di I^ grado ‘Bianco-Pascol’ (12/15/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-PIONIER (law firm) (11/30/2022)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Borgia (12/15/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Vicchio (12/15/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Bracciano (12/15/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Private individual (11/24/2022)

Controllers and Processors, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari (11/24/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Occidentale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Centrale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Giuliano Isontina (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Conservatorio di Musica S. Cecilia di Roma (11/10/2022)

Principles, Representative

Croatian Data Protection Authority (azop)-Company in the hospitality industry (11/25/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Betting place (11/25/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Betting place (12/5/2022)

Representative

Croatian Data Protection Authority (azop)-Retailer (12/5/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/6/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/6/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/7/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Fish market (12/7/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Jewelry manufacturer (12/8/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/8/2022)

Controllers and Processors, Representative

Italian Data Protection Authority (Garante)-Istituto Comprensivo – IC Cosenza III “V. Negroni” (9/21/2021)

Controllers and Processors, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/31/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (3/23/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-A.R.N.A.S. Civico (12/1/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Data Protection Authority of Ireland-Meta Platforms Ireland Limited (1/4/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Lazio Region (12/1/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/10/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Prestige Media PHG SRL (11/8/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Colosseo S.r.l. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Clio S.r.l. (7/21/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Ginosa municipality (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Acqua Novara.VCO S.p.a. (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Easylife Ltd. (10/4/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Estonian Data Protection Authority (AKI)-Health care worker (8/17/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Liceo Statale ‘Edoardo Amaldi” (9/1/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (10/5/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Health insurance provider (9/25/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A. (7/19/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-CDI Transport Intern și Internațional SRL (8/9/2022)

Data Subjects Rights, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Wabag Water Services SRL (8/9/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Data Protection Authority of Niedersachsen-Volkswagen (7/26/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Villabate municipality (5/12/2022)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Convitto Nazionale Statale ‘Giordano Bruno’ di Maddaloni (boarding school) (3/25/2021)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Region of Tuscany (5/26/2022)

Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Università Agraria di Nettuno (5/26/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Napoli Corpo di Polizia Municipale (5/22/2022)

Lawfulness of Processing, Representative

Data Protection Authority of Hamburg-Private individual (7/13/1905)

Controllers and Processors, Lawfulness of Processing, Representative

Cypriot Data Protection Commissioner-Εκδοτικού Οίκου Δίας (2/4/2022)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Clearview Al Inc. (7/13/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Stołeczny Ośrodek dla Osób Nietrzeźwych (5/31/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda Sanitaria Locale Roma (5/26/2022)

Data minimisation, Principles, Representative

Data Protection Authority of Berlin-Attorney (7/13/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Nos s.r.l.s. (4/28/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SCOTCH CORNER BAR (6/16/2022)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Isabella Gonzaga’ high school (4/28/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Medical clinic (7/13/1905)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Italian Data Protection Authority (Garante)-Italian Ministry of Defense (4/28/2022)

Controllers and Processors, Lawfulness of Processing, Representative, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kredyt Inkaso Investments RO S.A (5/18/2022)

Controllers and Processors, Data Breaches, Principles, Representative, Sensitive Data

Cypriot Data Protection Commissioner-Mediterranean Hospital of Cyprus (9/17/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-CAFFE VECCHIO, S.L. (4/28/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Concordia Capital IFN S.A. (5/4/2022)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Lillestrøm Municipality (2/2/2022)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavík (5/3/2022)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Company (4/1/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda sanitaria provinciale di Caltanissetta (3/10/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (3/2/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Danish National Genome Center (3/25/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Data Protection Authority of Bremen-BREBAU GmbH (3/3/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Employer (3/9/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Data Protection Authority of Sweden-Klarna Bank AB (3/28/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-Foreign language school (3/9/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Brussels Airport Zaventem (4/4/2022)

Data minimisation, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Ambuce Rescue Team (4/4/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Hörpu tónlistar- og ráðstefnuhúss ohf. (3/8/2022)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Region of Tuscany (2/10/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Azienda sanitaria unica regionale Marche (1/13/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Pactum Poland Sp. z o.o. (12/1/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-A.S.L. Napoli 1 Centro (1/13/2022)

Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-IAB Europe (2/2/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-ASL Latina (12/17/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/1/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Cosmote Mobile Telecommunications S.A. (1/27/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-B&T S.p.A. (11/25/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Aimon Srl (11/25/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative, Right to Object

Data Protection Authority of Saarland-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-C-Planet (IT Solutions) Limited (1/17/2022)

Integrity and confidentiality, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Elektro & Automasjon Systemer AS (12/13/2021)

Lawfulness of Processing, Legitimate Interest

Dutch Supervisory Authority for Data Protection (AP)-Dutch Minister of Finance (11/25/2021)

Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-Régie autonome des transports parisiens (11/4/2021)

Accountability, Controllers and Processors, Data minimisation, Principles, Representative, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-SERVICIOS LOGÍSTICOS MARTORELL SIGLO XXI, S.L. (10/26/2021)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO SANSUEÑA, S.L. (10/5/2021)

Controllers and Processors, Principles, Representative, Storage limitation, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-La Prima S.r.l. (9/16/2021)

Controllers and Processors, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Glove Technology SRL (10/21/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-Furnishyourspace S.L. (8/30/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Flowbird Italia s.r.l. (7/22/2021)

Principles, Representative

Italian Data Protection Authority (Garante)-Atac s.p.a. (7/22/2021)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Waxing Palace AS (8/12/2021)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Magyar Telekom Nyrt. (6/18/2021)

Accuracy, Controllers and Processors, Data Subjects Rights, Principles, Representative

Deputy Data Protection Ombudsman-Higher Education Institution (7/5/2021)

Data minimisation, Principles, Representative

Spanish Data Protection Authority (aepd)-INSTAPACK, S.L. (7/27/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Mercadona S.A. (7/26/2021)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative, Sensitive Data

Spanish Data Protection Authority (aepd)-Caixabank S.A. (7/8/2021)

Lawfulness of Processing, Legitimate Interest

Danish Data Protection Authority (Datatilsynet)-Nordbornholms Byggeforretning Aps (7/7/2021)

Controllers and Processors, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Storstockholms Lokaltrafik (6/21/2021)

Data Subjects Rights, Lawfulness of Processing, Legitimate Interest, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Unknown (7/12/1905)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-PNP S.A. (4/27/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-La Santrade S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Funeda Sp. z o.o. (3/19/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Norwegian Supervisory Authority (Datatilsynet)-Unknown (6/22/2021)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Dreamtime Call S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Norwegian Supervisory Authority (Datatilsynet)-Municipality of Oslo (5/20/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Innovasjon Norge (5/18/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Planet Group Spa (3/11/2021)

Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Locatefamily.com (12/20/2020)

Controllers and Processors, Representative

Norwegian Supervisory Authority (Datatilsynet)-Basaren Drift AS (3/21/2021)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Municipality (7/12/1905)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (7/12/1905)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Municipality of Enschede (3/11/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mediacom s.r.l. (3/11/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Asker Municipality (3/15/2021)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Miljø- og Kvalitetsledelse AS (4/9/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Czech Data Protection Auhtority (UOOU)-Mall.tv (7/12/1905)

Controllers and Processors, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Ski rental company (7/12/1905)

Consent, Controllers and Processors, Data minimisation, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Ιγνατιάδης Νικόλαος και ΣΙΑ Ε.Ε. (4/7/2020)

Controllers and Processors, Data minimisation, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (5/26/2020)

Controllers and Processors, Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Ålesund Municipality (3/15/2021)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Performance of Contract

Belgian Data Protection Authority (APD)-School (3/15/2021)

Controllers and Processors, Data minimisation, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Dragefossen AS (3/8/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ministero dell’Istruzione, Ufficio Scolastico Regionale per il Lazio (2/25/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Fastweb S.p.A. (3/25/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Equifax Iberica S.L. (3/10/2021)

Lawfulness of Processing, Legitimate Interest

Polish National Personal Data Protection Office (UODO)-Anwara Sp. z.o.o. (1/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Unknown (3/2/2021)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (2/12/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda sanitaria provinciale di Enna (1/14/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Unknown (1/12/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Coop Finnmark SA (1/14/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Aquateknikk AS (1/19/2021)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Family Service / N.D.P.K. nv. (1/27/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Smart Cities Sp. z o.o. (12/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Norwegian Supervisory Authority (Datatilsynet)-Cyberbook AS (2/3/2021)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. Amsterdam – Bucharest office (12/30/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Innovasjon Norge (1/4/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Lindstrand Trading AS (1/6/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Gveik AS (1/7/2021)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Apotheka e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Südameapteegi e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Azeta.ee e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Niedersachsen-notebooksbilliger.de (1/8/2021)

Controllers and Processors, Principles, Representative

Data State Inspectorate (DSI)-Unknown (12/15/2020)

Controllers and Processors, Principles, Representative

Austrian Data Protection Authority (dsb)-Private Individual (10/19/2020)

Controllers and Processors, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Unknown (11/13/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Gnosjö Municipality (11/25/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/11/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/16/2020)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Grant Ideas Ltd (10/19/2020)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Avata Hispania, S.L. (10/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Callesgarcia, S.L. (10/6/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Casaloldo (9/3/2020)

Controllers and Processors, Principles, Representative

Lithuanian Data Protection Authority (VDAI)-Vilnius City Municipality Administration (10/21/2020)

Accuracy, Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/28/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefonica Moviles Espana, S.A.U. (11/5/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/19/2020)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Former mayor of a community (9/7/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-GLP Instalaciones 86, SL (9/22/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-H&M Hennes & Mauritz Online Shop A.B. & Co. KG (10/1/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) (9/30/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Scanshare s.r.l. (9/30/2020)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (9/25/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Entrepreneur running a non-public nursery and pre-school (6/3/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Lycamobile (10/6/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de proprietari Militari R (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Venu Sanz Chef, S.L. (9/30/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Odin Flissenter AS (9/25/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Private Person (10/9/2020)

Controllers and Processors, Data minimisation, Principles, Representative

Spanish Data Protection Authority (aepd)-Centro de Investigación y Estudio para la Obesidad, SL (10/9/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Office for geodesy and cartography (7/15/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Vodafone España SAU (7/31/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Police Officer (8/17/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Basketball Federation of Castilla and Leon (8/28/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Surveyor General of Poland (‘GKK’) (8/31/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (9/1/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Forbes Hungary (7/23/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Apartment building owners association (9/1/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (9/17/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Political Party (9/11/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (8/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Cavauto S.R.L. (8/10/2020)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Baronissi (8/10/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Acc Consulting Varsinais-Suomi (8/5/2020)

Controllers and Processors, Principles, Representative

Austrian Data Protection Authority (dsb)-Bank (8/5/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-School (8/5/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Mapei S.p.A. (8/4/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Supermarket (8/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Manduria (7/30/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of San Giorgio Jonico (7/29/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Region of Campania (7/29/2020)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Communal political association (7/28/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Google Belgium SA (7/14/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria, SA (7/20/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (7/20/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-El Periódico de Catalunya, S.L.U. (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Aquateknikk AS (6/19/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-National Police Brigade (6/19/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Colledara (1/30/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-San Giorgio Jonico (3/5/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Odin Flissenter AS (7/2/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/2/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-East Power Sp. z o.o. (7/10/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Wind Tre S.p.A. (7/13/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Centro Internacional De Crecimiento Laboral Y Profesional S.L. (7/10/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (3/26/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Baden-Wuerttemberg-Allgemeine Ortskrankenkasse (‘AOK’) (health insurance company) (6/30/2020)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Miraclia (telecommunications company) (6/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Comunidad de propietarios demelza beach (6/22/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Café Bar (6/16/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Housing Association (6/16/2020)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Unknown (6/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Municipal employee (6/8/2020)

Controllers and Processors, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Lejre Municipality (6/30/2020)

Controllers and Processors, Data Breaches, Principles, Representative

Deputy Data Protection Ombudsman-Taksi Helsinki (5/29/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Representative

Deputy Data Protection Ombudsman-Unknown Company (5/22/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Creditor (3/9/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. (6/9/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Kymen Vesi Oy (5/22/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Italian Data Protection Authority (Garante)-Comune di Urago (2/13/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Vis Consulting Sp. z o.o. (3/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Belgian Data Protection Authority (APD)-Proximus SA (4/28/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Health and Medical Board of the Region of Örebro County (5/12/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Ireland-Tusla Child and Family Agency (5/17/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Private Person (3/16/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Oliveros Ustrell, S.L. (3/19/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-RTI – Reti Televisive Italiane s.p.a. (2/6/2020)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Speech and Special Education Centre – Mihou Dimitra (3/20/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Claim management company (6/3/2019)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (6/26/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Financial Enterprise (6/26/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapest Environs Regional Court (7/17/2019)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Public area maintenance company (8/2/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (10/15/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Representative of a local government (3/4/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Liceo Artistico Statale di Napoli (3/6/2020)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Liceo Scientifico Nobel di Torre del Greco (3/6/2020)

Controllers and Processors, Principles, Representative, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Google LLC (3/11/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Coop Finnmark SA (2/28/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Nordrhein-Westfalen-Private person (YouTube-Channel) (8/5/2019)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Cafetería Nagasaki (2/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Francavilla Fontana (1/15/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/27/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-HM Hospitales (2/25/2020)

Controllers and Processors, Principles, Representative

Dutch Supervisory Authority for Data Protection (AP)-Royal Dutch Tennis Association (‘KNLTB’) (3/3/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Eni Gas e Luce (12/11/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Italian Data Protection Authority (Garante)-Eni Gas e Luce (12/11/2019)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Aegean Marine Petroleum Network Inc. (12/19/2019)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-TIM (telecommunications operator) (1/15/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria S.L. (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Queseria Artesenal Ameco S.L. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Automoción (2/3/2020)

Controllers and Processors, Principles, Representative

Commission for Personal Data Protection (KZLD)-The Ministry of Interior Affairs (10/8/2019)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (12/11/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Royal President S.R.L. (11/29/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-Futura Internationale (11/21/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Restaurant (SANTI 3000, S.L.) (Unknown)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vueling Airlines (10/1/2019)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Doctor (7/11/1905)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Inteligo Media SA (9/26/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Slovak Data Protection Office-Unknown (Unknown)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (10/16/2019)

Controllers and Processors, Principles, Representative

Austrian Data Protection Authority (dsb)-Austrian Post (10/29/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/25/2019)

Controllers and Processors, Principles, Representative

Data Protection Authority of Sweden-School in Skellefteå (8/20/2019)

Controllers and Processors, Data minimisation, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Organizer of SZIGET festival and VOLT festival (5/23/2019)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-PWC Business Solutions (7/30/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (4/17/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Data Protection Commision of Bulgaria (KZLD)-A.P. EOOD (3/26/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UNICREDIT BANK SA (6/27/2019)

Controllers and Processors, Principles, Privacy by Design, Representative

Danish Data Protection Authority (Datatilsynet)-IDdesign A / S (2/12/2021)

Controllers and Processors, Principles, Representative, Storage limitation

Data Protection Authority of Sachsen-Anhalt-Private person (2/5/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Debt collector (2/20/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Mayor’s Office of the city of Kecdkemét (2/28/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Austrian Data Protection Authority (dsb)-Private car owner (9/27/2018)

Controllers and Processors, Lawfulness of Processing, Representative

Austrian Data Protection Authority (dsb)-Private person (12/20/2018)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg discussion paper on “Legal Foundations in Data Protection for the Use of AI”

AI, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Case C‑621/22 CJEU

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

Guidelines 1/2024 on processing of personal data based on Article 6(1)(f) GDPR by EDPB

Lawfulness of Processing, Legitimate Interest

New data protection audit framework launched to help organisations improve compliance by UK ICO

Controllers and Processors, Data Sharing, Data Subjects Rights

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Telegram’s New Policy: User Data to Be Shared with Authorities in Criminal Cases

Data Sharing, Data Subjects Rights

LinkedIn Used User Data for AI Training Before Updating Its Terms

AI, Data Sharing, Data Subjects Rights, Lawfulness of Processing

Privacy Impact Assessment (PIA) Templates by CNIL

Data Protection Impact Assessment (DPIA)

Recommendation 01/2019 on the draft list of the European Data Protection Supervisor regarding the processing operations subject to the requirement of a data protection impact assessment (Article 39.4 of Regulation (EU) 2018/1725) |EPDB

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Comparison of U.S. State Privacy Laws. Data Protection Assessments by CIPL

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Draft Impact Assessment Framework by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Processing Personal Data on the Basis of Legitimate Interests under the GDPR by FPF

Lawfulness of Processing, Legitimate Interest

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

GUIDELINES ON LEGITIMATE INTEREST by the NPC of the Republic of Philippines

Lawfulness of Processing, Legitimate Interest

Annex: A summary of the Transparency in Health and Social Care guidance impact assessment by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Transparency in health and social care by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

Privacy Impact Assessment Tool by the Australian Government

Controllers and Processors, Data Protection Impact Assessment (DPIA)

GDPR guidance: Legitimate Inerersts Assessments (LIA) for Digital Advertising

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

DPIA for AI template

Controllers and Processors, Data Protection Impact Assessment (DPIA)

AI and Data Protection Risk Toolkit by UK ICO

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Audit Requirements for Personal Data Processing Activities involving AI by AEPD

Controllers and Processors, Data Protection Impact Assessment (DPIA), Technical and Organisational Measures (TOMs)

Human rights Impact Assessments for AI

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Infographic DPC TikTok Fine

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Fairness, Liability and Remedies, Principles, Supervisory Authorities

C-597/19

Lawfulness of Processing, Legitimate Interest

C-708/18

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

Frequently Asked Questions (FAQs) on the Data Act by the EU Commission

Controllers and Processors, Data Sharing

Relying on the legal basis of legitimate interests to develop an AI system by CNIL

Lawfulness of Processing, Legitimate Interest

CNIL open source PIA software – data protection impact assessment

Data Protection Impact Assessment (DPIA)

Meta Platforms Ireland v EDPB (Case T-319/24)

Controllers and Processors, Data Sharing, Data Subjects Rights

Case C‑461/22 CURIA

Data Controller, Definitions

Data protection impact assessment for AI Solutions by Danish DPA

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Data protection impact assessment on the processing of personal data on government Facebook Pages

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Opinion 20/2021 on Tobacco Traceability System |EDPB

Controllers and Processors, Data Sharing

Data Sharing Code of Practice by UK ICO [Controller to Controller]

Controllers and Processors, Data Sharing

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Human rights Impact Assessments for AI by Access Now

AI, Data Protection Impact Assessment (DPIA)

Opinion on legitimate interests of the data controller (Opinion 06/2014)

Legitimate Interest

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Guide to Data Protection Impact Assessments by PDPC Singapore

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessments (DPIA) Template by UK ICO

Data Protection Impact Assessment (DPIA)

How to manage DPIAs by Data Protection Network (DPN)

Data Protection Impact Assessment (DPIA)

Data Protection Impact Assessment (DPIAs) by APDCAT

Data Protection Impact Assessment (DPIA)

Guide to Data Protection Impact Assessments (DPIAs) by the Irish DPC

Data Protection Impact Assessment (DPIA)

GDPR Risk Assessment by the AEPD

Data Protection Impact Assessment (DPIA)

Guidelines on Data Protection Impact Assessment (DPIA) and determining whether processing is “likely to result in a high risk” for the purposes of Regulation 2016/679

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Knowledge Bases by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Methodology by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment (PIA) Methodology Mindmap by CNIL

Data Protection Impact Assessment (DPIA)

Privacy Impact Assessment – Internet of Things Devices (CNIL)

Data Protection Impact Assessment (DPIA)

Guidelines on transparency under Regulation 2016/679

Transparency

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

CIPL Examples of Legitimate Interest Grounds for Processing of Personal Data [PDF] [Official Guidelines]

Lawfulness of Processing, Legitimate Interest

The NSW AI Assessment Framework

Controllers and Processors, Data Protection Impact Assessment (DPIA)

AI Possible Risks & Mitigations Optical Character Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI Possible Risks & Mitigations Named Entity Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

5310-C Privacy Threshold Assessments and Privacy Impact Assessments by Office of Information Security

Controllers and Processors, Data Protection Impact Assessment (DPIA)

AI and Data Protection risk toolkit by the UK ICO

AI, Data Protection Impact Assessment (DPIA)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

Risk Management and Impact Assessment (DPIA) by AEPD

Data Protection Impact Assessment (DPIA)