Search results

delete the audio recordings, as they are included as an essential element in patient treatment and on an equal footing with the doctors' other medical records

unauthorized persons. In this connection, the Family Court has entered into an agreement with an external auditing company to review the course of events and systems

already submitted samples for scientific purposes. The Icelandic DPA launched an investigation regarding the lawfulness of the processing. The Icelandic DPA

The Romanian DPA (ANSPDCP) fined an energy company EUR 3,000 for violation of the security and confidentiality of personal data. The energy company Enel

The Slovenian Supervisory Authority (IP) issued an opinion as foreseen under Article 58(3) GDPR on the issue of the validity of consent to access digital

Helenic DPA (HDPA) caused by an external cyber attack. The starting point of the breach was a server of the OTE group, which has an annual turnover of €3,258

denounced that the respondent had installed a video surveillance system with an alleged focus on the complainant's house, infringing article 5(3) GDPR which

The Italian DPA decided on March 26th 2020 to impose on Cavauto srl., an appointed car dealer, a fine of € 10.000,00 as well as other measurements to ensure

formation of an opinion public. In accordance with the jurisprudence of the Constitutional Court and the Court Supreme, all the information referring to an event

photograph of an arrested person - attributable to a "mugshot" or similar to the latter - not justified by proven need for justice and police constitutes an unlawful

days by submitting either: - an appeal under the Administrative Procedure Act to the Data Protection Inspectorate or - an appeal under the Administrative

system, an arbitrated procedure where the affected develops its activity. In accordance with the evidence available for such conduct constitutes an infringement

concluded that the municipality had not sufficiently demonstrated that it had an ongoing legal obligation to process the data. The court set aside the municipality's

directly or indirectly, in particular using an identifier, such as a name, an identification number, location data, an online identifier or one or more elements

The Spanish DPA decided that, in light of an access request, the controller needs to inform the data subject about whether it has transferred their data

not affect common areas. Also, it must have an approved sign, indicating the controller's identity and an effective address to which it can be directed

situation arose in the kindergarten's cloakroom where the boy in question had an outburst of anger. The incident was filmed by one of the staff. The recording

entities informed the respondent about it, so the inclusion of the data implies an illegitimate processing of personal data. Share your comments here! Share

List (advertising exclusion list). The Spanish DPA (AEPD) therefore began an investigation to clarify the facts at stake. This revealed that Vamavi Phone

failing to properly respond to an access request, in violation of Articles 15(3) and 33 GDPR. The data subject made an access request to the controller