Search results

fines up to 10,000,000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover. CJEU case law demonstrates that administrative

initial processing. Recital 94: Consultation of the Supervisory Authority in Case of High Risk Where a data protection impact assessment indicates that the

processing, which can lead to confusion and subsequent errors. The case-law reflects both views. Case-law: The Norwegian Privacy Appeals Board (Personvernrådet)

accordance with any retained case law and any retained general principles of EU law that are relevant: EUWA s.6(3). "Retained EU case law" and "retained general

page 4. Case C-34/21, Hauptpersonalrat der Lehrerinnen und Lehrer, para 40. Case C-34/21, Hauptpersonalrat der Lehrerinnen und Lehrer, para 42. Case C-34/21

Union or Member State law for consultation are fulfilled in the particular case. Where a transfer could not be based on a provision in Article 45 or 46,

stage, ideally at the certain processing operations are designed. In any case, the DPO shall be involved at a stage when fundamental decisions can still

388 (Oxford University Press, Oxford, 2020). Case C‑439/19, Latvijas Republikas Saeima, paras 74-75. Case C‑439/19, Latvijas Republikas Saeima, para 105

personal data appear in such documents. This analysis must be made on a case-by-case basis, in light of all the relevant circumstances, including the nature

mandate would unjustifiably interfere with the independence of SAs. Case law: The Garai case is also interesting in this regard. While it did not concern a

assessment referred to in paragraph 1 shall in particular be required in the case of: (a) a systematic and extensive evaluation of personal aspects relating

likely to materialise; (c) it would involve disproportionate effort. In such a case, there shall instead be a public communication or similar measure whereby

controller, or when the data subject has given his or her explicit consent. In any case, such processing should be subject to suitable safeguards, which should include

with the exception of paragraph 5, each Member State shall refrain, in the case provided for in paragraph 1, from requesting reimbursement from another Member

issue that is independent of any particular case or cases. The refusal by the EDPB to issue an opinion in cases which fulfil the necessary criteria, shall

however, that any type of clear, unambiguous statement, support or, as the case may be, rejection of a political party or of an ideological organization

personal data relating to him or her are being collected, such as in the case of online advertising. Given that children merit specific protection, any

philosophical or non-confessional organisations. In the Jehovan todistajat case for example, the CJEU seems to have recognized the Jehovah's Witnesses community

component of the right to data protection under CJEU case law. The independence of SAs was developed by CJEU case law and codified in Article 52 GDPR and subsequent

The assessment of "disproportionate effort" must be carried out on a case by case basis. The financial and time interests of the controller and the recipients