Решение Рег.№ ППН-02-399-2019 КЗЛД – НАП

Controllers and Processors, Data Breaches, Lawfulness of Processing

Наказателно постановление-04-2019-КЗЛД-НАП

Controllers and Processors, Data Breaches, Lawfulness of Processing

C-340/21

Controllers and Processors, Liability and Penalties, Supervisory Authorities, Technical and Organisational Measures (TOMs)

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Penalties

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Case C‑740/22

Definitions, Personal Data

Case C‑604/22

Liability and Penalties, Supervisory Authorities

PRESS RELEASE No 20/24 | Case C-118-22

Data Subjects Rights, Right to Erasure

Case ZWO 22/775, Overijssel District, Netherlands

Liability and Penalties, Supervisory Authorities

CASE STUDIES (2018 – 2023) by the Irish DPC

Access Requests (DSAR), Controllers and Processors, Data Breaches, Data Subjects Rights, Liability and Penalties, Supervisory Authorities

One-stop-shop case digest on Security of Processing and Data Breach Notification by the EDPB

Controllers and Processors, Data Breaches, Technical and Organisational Measures (TOMs)

Case T-1077/23

AI, Copyright, Specific processing situations

Case C 683-2021

Controllers and Processors, Liability and Penalties, Supervisory Authorities

[Press release] Commission opens formal proceedings against X under the Digital Services Act

Digital Services Act

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

Liability and Penalties, Supervisory Authorities

The NYT vs OpenAI and Microsoft

AI, Copyright, Specific processing situations

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Penalties, Supervisory Authorities

Personal Data Protection Factsheet by the ECHR

Data Subjects Rights

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Liability and Penalties, Supervisory Authorities

Case C-307-2022

Data Subjects Rights

T‑553-23 R

Data Transfers

Infographic DPC TikTok Fine

Fairness, Liability and Penalties, Principles, Supervisory Authorities

C-460/20

Data Subjects Rights, Right to Erasure, Search Engines, Specific processing situations

Case C-101/01

Data Transfers, Definitions, Principles, Processing of personal data, Sensitive Data

CASE OF BIG BROTHER WATCH AND OTHERS v. THE UNITED KINGDOM

National Security, Specific processing situations

OPINION 1/15 OF 26. 7. 2017

Data Transfers

C-645/19

Supervisory Authorities

C-597/19

Lawfulness of Processing, Legitimate Interest

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

C-61/19

Consent, Lawfulness of Processing

C-708/18

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Joined Cases C-511/18, C-512/18 and C-520/18

Criminal Convictions and Offences, National Security, Principles, Specific processing situations

C-507/17

Data Subjects Rights, Right to Erasure, Territorial Scope

C-496/17

Lawfulness of Processing, Public Interests

C-136/17

Data Subjects Rights, Principles, Right to Erasure, Search Engines, Sensitive Data, Specific processing situations

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-154/21

Access Requests (DSAR), Data Subjects Rights

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

C-77/21

Principles, Purpose limitation

C-34/21

Employment, Specific processing situations

C-534/20

Controllers and Processors, Data Protection Officer (DPO)

C-319/20

Representation of data subjects

C-245/20

Supervisory Authorities

C-184/20

Principles, Sensitive Data

C-102/20

Consent, Lawfulness of Processing

Case C-487/21

Access Requests (DSAR), Data Subjects Rights

C-252/21

Contractual Obligation, Lawfulness of Processing, Principles, Sensitive Data

Case C-60/22

Accountability, Controllers and Processors, Joint Controllers, Principles

C-453/21

Controllers and Processors, Data Protection Officer (DPO)

C-349/21

Access Requests (DSAR), Data Subjects Rights

C-306/21

Lawfulness of Processing, Public Interests

C-300/21

Liability and Penalties, Supervisory Authorities

C-268/21

Data minimisation, Principles

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

Noyb Complaint Case: C-082-01 to EU Data protection Supervisor against EU Parliament

Controllers and Processors, Data Breaches, Public Administrative Body

Decision by the Federal Administrative Court Austria W137 2252081-1/6E (german)

Consent, Lawfulness of Processing

Decision by Dutch Data Protection Authority to impose an administrative fine on Uber |English

Controllers and Processors, Data Breaches, Data Subjects Rights

Noyb Complaint Case: C-082-02 to EU Data protection Supervisor against EU Parliament

Controllers and Processors, Data Breaches, Public Administrative Body

Meta Platforms Ireland v EDPB (Case T-319/24)

Controllers and Processors, Data Sharing, Data Subjects Rights

Case 3:24-cv-04710-TSH DAVID MILLETTE VS OPENAI

Data Subjects Rights

Case C‑461/22 CURIA

Data Controller, Definitions

JUDGMENT OF THE GENERAL COURT Case T‑1077/23 (ByteDance and EU Commission)

Final State of Texas v Meta Order 2024

Facial Recognition, Specific processing situations

DECISION UK ICO Snap Inc. and Snap Group Limited

Data Subjects Rights

Case C-394/23, Mousse: Request for a preliminary ruling from the Conseil d’État (France) lodged on 28 June 2023 — Association Mousse v Commission nationale de l’informatique et des libertés (CNIL), SNCF Connect

Definitions, Processing of personal data

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Case 4:23-cv-01110-P AHA v. Bacerra

Health Data, Principles, Sensitive Data

Decision on the merits 46/2024 by the Belgian DPA

Access Requests (DSAR), Data Subjects Rights

META PLATFORMS INC v. FEDERAL TRADE COMMISSION (2024)

Guide to the Case-Law of the of the European Court of Human Rights

Data Subjects Rights

Maximillian Schrems v. Data Protection Commissioner [2015] Case C-362/14, 6 October 2015.

Data Transfers

Digital Rights Ireland Ltd. v. Minister for Communications and Others [2014] Joined Cases C-293/12 and C-594/12

Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González [2014] Case C-131/12

Search Engines

EU-Canada PNR Agreement of 26 July 2017 (Grand Chamber) (EU:C:2017:592)

Data Transfers

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

Nowak (C-434/16, EU:C:2017:994)

Personal Data

CNIL and others v Google Case C 136/17

Search Engines, Specific processing situations

Google v CNIL Case C 507/17

Search Engines

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Consent, Personal Data

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

František Ryneš v. Úřad pro ochranu osobních údajů [2014] Case C-212/13, 11 December 2014

CCTV

Weltimmo s.r.o. v. Nemzeti Adatvédelmi és Információszabadság Hatóság [2015] Case C-230/14, 1 October 2015

Main Establishment

Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (Case C-311/18), 16 July 2020.

Data Transfers

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Liability and Penalties, Supervisory Authorities

Administrative fine against Grindr LLC by The Norwegian Data Protection Authority

Consent, Lawfulness of Processing, Principles, Sensitive Data

SUPERIOR COURT OF THE STATE OF CALIFORNIA COUNTY OF LOS ANGELES Case No. BC492959

Liability and Penalties

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

Automated Decision-making

Tele2 Sverige AB v. Post-och telestyrelsen and Secretary of State for the Home Department v. Tom Watson and others Joined Cases C-203/15 and C-698/15

Data minimisation

Big Brother Watch and others v United Kingdom (Applications nos 58170/13, 62322/14 and 24960/15), 25 May 2021.

Data minimisation

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Penalties, Spam

GDPR Fines Tracker

Liability and Penalties, Supervisory Authorities