Search results

under Article 30(1) GDPR, documenting personal data breaches under Article 33(5) GDPR or performing a data protection impact assessment under Article 35

the other refers to the controller’s." When a data breach occurs (Articles 33-34 GDPR), the processor shall notify the controller without undue delay. The

unnecessarily disruptive to the use of the service for which it is provided. Recital 33: Consent for Scientific Research It is often not possible to fully identify

of secrecy are laid down in the EDPB's Rules of Procedure (“RoP”). Article 33(1) RoP stipulates that in “accordance with Art 76 (1) GDPR”, discussions of

action on the part of the controller or processor, for instance, Articles 33 and 36 GDRP. To illustrate, Article 36 GDPR obliges the controller to consult

Valby DENMARK Webpage: datatilsynet.dk Email: dt@datatilsynet.dk Phone: +45 33 1932 00 Twitter: n/a Procedural Law: n/a Decision Database: Link Translated

(Article 32), responsibilities of the DPO in case of data breaches (Articles 33 and 34), and preparation of data protection impact assessments and prior consultation

Article 84, margin number 1 (C.H. Beck 2018, 2nd edition). CJEU, Rewe, Case C-33/76, 16 December 1967 (available here) cited by Lynskey in Kuner et al., The

Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 30 GDPR, margin number 33 (C.H. Beck 2019). Scholars note that the requirement to specify the responsible

DVI has 33 employees as per 1st October 2022 out of totally approved 34 positions. About 76 % are women, 24% are men.   Historical numbers: 2021: 33 positions

personal data breaches and determining the undue delay referred to in Article 33(1) and (2) and for the particular circumstances in which a controller or a

Transparency under Regulation 2016/679’, 17/EN WP260 rev.01, 11 April 2018, p. 33 (available here).

Articles 12-23 GDPR; the obligation to notify data breaches pursuant to Article 33 GDPR; the obligation of data protection by design and by default, pursuant

number 47 (available here). CJEU, Case C-212/13, Ryneš, margin numbers 31 and 33 (available here). Especially, CJEU, C-101/01, Lindqvist, 6 November 2003,

personal data breaches to the supervisory authority and data subjects (Articles 33 and 34), conducting Data Protection Impact Assessments (Articles 35 and 36)

on data subject rights - Right of access’, 28 March 2023 (Version 2.0), p. 33 (available here). For example, the District Court of Amsterdam has held that

with the supervisory authority Article 32: Security of processing Article 33: Notification of a personal data breach to the supervisory authority Article

(available here). Paal, in Paal, Pauly, DS-GVO BDSG Article 23, margin number 33 (C.H.Beck 2021, 3rd Edition) and Bäcker, in Kühling, Buchner, DS-GVO BDSG

especially where there is a reason for urgency. It must be noted here that Articles 33(3)(b) and 34(2) GDPR on post-data breach communications both require the controller

rules regarding the processing of personal data of deceased persons. Recital 33: Consent for Scientific Research It is often not possible to fully identify