Search results
From GDPRhub
- AEPD (Spain) - PS/00240/2019 (category Article 5(1)(b) GDPR)principle enclosed in Article 5(1)(b) GDPR. On this matter, the AEPD argued that, according to Article 5(1)(a) GDPR, Recital 39 and Article 6(1)(f), an interest602 KB (102,229 words) - 14:21, 13 December 2023
- EDPB - Binding Decision 1/2020 - 'Twitter' (category Article 4(24) GDPR)(Article 5(2) GDPR), of engagement of a processor (Article 28 GDPR), and in respect of the security of processing of personal data (Article 32 GDPR). However183 KB (30,819 words) - 09:50, 20 January 2023
- BVerfG - 1 BvR 16/13 (category Article 17 GDPR)29; judgment of 29 July 2019, Pelham and others, C-476/17, EU:C:2019:624, recital 80 et seq.), the level of protection afforded by the Charter does not regularly133 KB (21,944 words) - 15:59, 22 March 2022
- Garante per la protezione dei dati personali (Italy) - 9771184 (category Article 5(1)(a) GDPR)parties and for adopting inadequate security measures pursuant to Article 32 GDPR. The controller is the Italian administration that manages insurances for86 KB (13,753 words) - 16:35, 15 June 2022
- EDPB - Binding Decision 4/2022 - 'Meta (Instagram)' (category Article 4 GDPR)with GDPR transparencyobligations under Article 13(1)(c) GDPR involves a separateand different legalassessment tothatrequired in Article6(1)(b) GDPR.TheIE468 KB (51,340 words) - 14:10, 30 January 2023
- UODO (Poland) - DKN.5130.2215.2020 (category Article 5(1)(f) GDPR)to modification, which constitutes a breach of Article 32(1) GDPR and Article 32(2) GDPR. Both Fortum and PIKA failed to implement appropriate technical110 KB (17,650 words) - 12:27, 29 April 2022
- CNPD (Portugal) - Deliberaçao 2024/137 (category Article 5(1)(a) GDPR)pursuant to Article 56 GDPR. It concluded that the controller violated Articles 5(1)(a), 7(3), 9(1), and 13(2)(c), and 17(1) GDPR. It imposed a temporary49 KB (7,923 words) - 14:36, 3 April 2024
- VfGH - G 287/2022-16, G 288/2022-14 (category Article 85 GDPR)Reference to Art. 79 GDPR does not justify any jurisdiction, since Art. 79 GDPR (like Art. 77 GDPR) only refers to violations of the GDPR but not on national202 KB (29,013 words) - 13:35, 12 January 2023
- ICO (UK) - Enforcement Notice and Warning Letter - Home Office (category Article 5(2) GDPR)accountability pursuant to Article 5(2) UK GDPR because it failed to demonstrate compliance with Article 5(1)(a) and (c) UK GDPR principles of lawfulness, fairness129 KB (17,281 words) - 14:57, 10 April 2024
- PHR - 22/01253 (category Article 15 GDPR)corresponding interest can be found in the GDPR. Notably, the PG referenced Recital 52 and Article 9 GDPR. Recital 52 GDPR states that a derogation from the prohibition241 KB (42,617 words) - 14:14, 13 September 2022
- EDPB - Binding Decision 2/2022 - 'Instagram' (category Article 5(1)(c) GDPR)performance of a contract (Article 6(1)(b) GDPR) and for legitimate interest (Article 6(1)(f) GDPR). Article 6(1)(b) GDPR In its original draft decision, the276 KB (38,206 words) - 09:46, 20 January 2023
- DSB (Austria) - DSB-D130.1174 (category Article 3 GDPR)activities fell within the territorial scope of the GDPR under Article 3 GDPR. The territorial scope of the GDPR applies if the processing activities are related86 KB (14,497 words) - 13:42, 3 April 2024
- OGH - 6Ob56/21k (category Article 2(2)(c) GDPR)member states is superimposed (see Recital 146 S 4 and 5 on the GDPR; cf. also Frenzel in Paal / Pauly, GDPR-BDSG3 Art 82 GDPR margin no.1; Wybitul / Haß / Albrecht127 KB (21,056 words) - 08:17, 19 August 2021
- UODO (Poland) - DKN. 5131.27.2022 (category Article 33(1) GDPR)No. 144, item 1204, as amended) is the Chief Surveyor of the Country ”. In the indicated regulations of the Website, in the chapter entitled "GDPR - Fulfillment80 KB (13,127 words) - 07:57, 14 September 2022
- OVG Münster - 16 A 1582/21 (category Article 12(5) GDPR) (section Applicability of Articles 15(3)(1), 12(5)(1) GDPR)12(5)(1) GDPR apply. However, it leaves open whether the material scope of application of the GDPR is opened or not opened due to Article 2(2)(a) GDPR. In any123 KB (20,784 words) - 10:11, 26 November 2021
- First-tier Tribunal - Clearview AI Inc. v ICO (category Article 3(2)(b) GDPR)persuasive weight. 82. Recital 24 of the GDPR is relevant to the construction of Article 3(2)(b) GDPR and Article 3(2)(b) UK GDPR, this reads as follows:99 KB (16,103 words) - 08:41, 25 October 2023
- AEPD (Spain) - PS/00261/2020 (category Article 5(1)(c) GDPR)publication and the entry into force of the GDPR, and that therefore the controller had violated Article 12 GDPR, by not fulfilling their information obligations54 KB (8,837 words) - 13:34, 16 June 2021
- AEPD (Spain) - PS/00477/2019 (category Article 6 GDPR)with the requirements of Articles 13 and 14 of the GDPR? In relation to Article 13 and 14 of the GDPR, the AEPD held that the information CaixaBank provided566 KB (93,179 words) - 13:43, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9751362 (category Article 5(1)(b) GDPR)privacy policy did not refer to GDPR. Clearview did not have a representative in the Union as mandated by Article 27 GDPR. Accordingly, the activities of134 KB (21,856 words) - 05:16, 25 May 2022
- DSB (Austria) - DSB-D130.217 (category Article 3 GDPR)the territorial scope of the GDPR (Article 3 GDPR) as it was based exclusively in the USA and under US law, and thus the GDPR is not applicable. It also77 KB (12,447 words) - 08:22, 4 April 2024