Welcome to GDPRhub
Welcome to GDPRhub!
GDPRhub is a wiki with GDPR-related decisions and knowledge, enabling anyone to find and share GDPR insights across Europe!
GDPRhub collects and summarises decisions from Data Protection Authorities (DPAs) and courts across Europe. We believe a good overview of national decisions is a key to a pan-European debate on the interpretation of contentious GDPR issues. As we monitor more than 100 webpages across all Member States for new decisions, this database grows day by day — subscribe to GDPRtoday to get a weekly update!
GDPRhub is an initiative by noyb.eu, and made possible by the contributions of hundreds of volunteers.
| GDPR Decision Database |
|---|
| GDPRhub contains summaries of 2000+ national GDPR decisions that you can search for free: |
 |
|
You can also browse decisions grouped by GDPR Article, Data Protection Authority, National and European Courts, Jurisdiction, Year or Language of the Original Decision. |
| GDPR Knowledge | ||
|---|---|---|
| On GDPRhub you can also find knowledge about the GDPR and its enforcement — anything from the phone number of the Icelandic DPA to a deep dive into each article of the GDPR. | ||
 |
 |
 |
New on GDPRhub:
CJEU - C‑97/23 - WhatsApp Ireland Ltd
The AG opined that WhatsApp could challenge the EDPB's binding decision before the European General Court under Article 263 TFEU. Specifically, the AG considered WhatsApp to be directly concerned by the binding decision.
ANSPDCP (Romania) - One United Properties SA
The DPA fined a real estate investor RON 9,994 (€2,000) for failing to prove consent to the use of personal data for telemarketing, and for failing to respond to data access requests.
ANSPDCP (Romania) - NTT Data Romania SA
The DPA fined a consulting and IT services company RON 124,432.50 (€25,000) after a data breach caused by a cyberattack. The company failed to implement sufficient security measures and failed to notify the DPA within 72 hours.
US Split - Us I-2033/2024-4
A court held that a DPA failed to respond to a data subject's complaint in time and only after the data subject initiated administrative proceedings. The court suspended these proceedings and ordered the DPA to pay €1,250 in administrative dispute costs.
GDPRhub is an interactive Community
Subscribe to the weekly GDPRtoday newsletter!
Once a week, our team will send you a quick overview in English of all new decisions from all across Europe — right to your mailbox. Obviously it’s free and you can cancel at any time.
Add or edit GDPR decisions
Anonynous editing and posting is currently disabled due to spamming.
→How to add a new decision
→How to edit a page on GDPRhub
Become a GDPRhub Country Reporter
Besides the volunteers that contribute spontaneously, our country reporters are the regular contributors that help keeping the GDPRhub consistent, up to date and accurate. As a country reporter, you will hear about new decisions in your chosen country via email or our internal chat rooms, and may be asked if you can contribute a summary. Ideally you can update the GDPRhub for your home jurisdiction that you may already be following through your daily work.
Most active contributors
Last 90 days (Top 15) |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Shown are the top 15 contributors over the last 90 days, excluding noyb staff. Create an account and join us!
