Decision on the merits 46/2024 by the Belgian DPA

Access Requests (DSAR), Data Subjects Rights

META PLATFORMS INC v. FEDERAL TRADE COMMISSION (2024)

PRESS RELEASE No 20/24 | Case C-118-22

Data Subjects Rights, Right to Erasure

Case ZWO 22/775, Overijssel District, Netherlands

Liability and Penalties, Supervisory Authorities

CASE STUDIES (2018 – 2023) by the Irish DPC

Access Requests (DSAR), Controllers and Processors, Data Breaches, Data Subjects Rights, Liability and Penalties, Supervisory Authorities

Case C 683-2021

Controllers and Processors, Liability and Penalties, Supervisory Authorities

One-stop-shop case digest on Security of Processing and Data Breach Notification by the EDPB

Controllers and Processors, Data Breaches, Technical and Organisational Measures (TOMs)

[Press release] Commission opens formal proceedings against X under the Digital Services Act

Digital Services Act

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

Liability and Penalties, Supervisory Authorities

The NYT vs OpenAI and Microsoft

AI, Copyright, Specific processing situations

Case T-1077/23

AI, Copyright, Specific processing situations

Personal Data Protection Factsheet by the ECHR

Data Subjects Rights

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Liability and Penalties, Supervisory Authorities

Press Release No 184-23 by the CJEU

Joint Controllers, Liability and Penalties, Supervisory Authorities

Case C-307-2022

Data Subjects Rights

Infographic DPC TikTok Fine

Fairness, Liability and Penalties, Principles, Supervisory Authorities

T‑553-23 R

Data Transfers

C-645/19

Supervisory Authorities

C-597/19

Lawfulness of Processing, Legitimate Interest

C-439/19

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

C-61/19

Consent, Lawfulness of Processing

C-708/18

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Joined Cases C-511/18, C-512/18 and C-520/18

Criminal Convictions and Offences, National Security, Principles, Specific processing situations

C-507/17

Data Subjects Rights, Right to Erasure, Territorial Scope

C-496/17

Lawfulness of Processing, Public Interests

C-136/17

Data Subjects Rights, Principles, Right to Erasure, Search Engines, Sensitive Data, Specific processing situations

C-460/20

Data Subjects Rights, Right to Erasure, Search Engines, Specific processing situations

Case C-101/01

Data Transfers, Definitions, Principles, Processing of personal data, Sensitive Data

CASE OF BIG BROTHER WATCH AND OTHERS v. THE UNITED KINGDOM

National Security, Specific processing situations

OPINION 1/15 OF 26. 7. 2017

Data Transfers

Case C-487/21

Access Requests (DSAR), Data Subjects Rights

C-252/21

Contractual Obligation, Lawfulness of Processing, Principles, Sensitive Data

Case C-60/22

Accountability, Joint Controllers, Principles

C-453/21

Controllers and Processors, Data Protection Officer (DPO)

C-349/21

Access Requests (DSAR), Data Subjects Rights

C-306/21

Lawfulness of Processing, Public Interests

C-300/21

Liability and Penalties, Supervisory Authorities

C-268/21

Data minimisation, Principles

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

C-180/21

Criminal Convictions and Offences, Lawfulness of Processing, Principles, Public Interests

C-154/21

Access Requests (DSAR), Data Subjects Rights

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

C-77/21

Principles, Purpose limitation

C-34/21

Employment, Specific processing situations

C-534/20

Controllers and Processors, Data Protection Officer (DPO)

C-319/20

Representation of data subjects

C-245/20

Supervisory Authorities

C-184/20

Principles, Sensitive Data

C-102/20

Consent, Lawfulness of Processing

Bodil Lindqvist [2003] Case C-101/01, 6 November 2003

Automated Decision-making

Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González [2014] Case C-131/12

Data Controller, Personal Data

Digital Rights Ireland Ltd. v. Minister for Communications and Others [2014] Joined Cases C-293/12 and C-594/12

Data minimisation

Tele2 Sverige AB v. Post-och telestyrelsen and Secretary of State for the Home Department v. Tom Watson and others Joined Cases C-203/15 and C-698/15

Data minimisation

Maximillian Schrems v. Data Protection Commissioner [2015] Case C-362/14, 6 October 2015.

Adequacy Decisions, Data Transfers

Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (Case C-311/18), 16 July 2020.

Adequacy Decisions, Data Transfers

Big Brother Watch and others v United Kingdom (Applications nos 58170/13, 62322/14 and 24960/15), 25 May 2021.

Data minimisation

Weltimmo s.r.o. v. Nemzeti Adatvédelmi és Információszabadság Hatóság [2015] Case C-230/14, 1 October 2015

Territorial Scope

František Ryneš v. Úřad pro ochranu osobních údajů [2014] Case C-212/13, 11 December 2014

Material scope

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies, Lawfulness of Processing

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Consent, Data Controller, Legitimate Interest

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Personal Data

Google v CNIL Case C 507/17

Automated Decision-making, Search Engines

CNIL and others v Google Case C 136/17

Automated Decision-making, Search Engines, Sensitive Data

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

Nowak (C-434/16, EU:C:2017:994)

Personal Data

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Criminal Convictions and Offences, Public Administrative Body, Sensitive Data

EU-Canada PNR Agreement of 26 July 2017 (Grand Chamber) (EU:C:2017:592)

Data Transfers

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Penalties, Spam

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Consent, Contractual Obligation, Cooperation and consistency, Lawfulness of Processing, Legitimate Interest

GDPR Fines Tracker

Liability and Penalties, Supervisory Authorities