Search results

national legislation. The DPA conducted an audit of the IT University of Copenhagen (ITU) and their use of an online proctoring service for one of their

number of persons so that the information was accessed by sending an e-mail (i.e. an automated process). 19. In this sense, it is clear that within the

GDPR by requiring a legitimate interest for granting an access request, and by not responding to an access request, thus denying the data subject its rights

information. That is not an improper purpose. Court can deal with abuse of process if shown If there is an abuse in seeking a remedy for an ulterior purpose,

the same results. An automated message informing clients that the account was no longer functioning, for instance, would have been an adequate solution

there was an error in the delivery and that several letters to a couple of clients were confused. With the same date "Client indicates that an unknown person

AP has started an official investigation. This decision covers the period from 2012 to enwith2018. 1.2Process flow On 4 September 2018, an AP supervisor

as "personal data": any information about an identified or identifiable natural person ("data subject"); An identifiable natural person shall be considered

ordered an employer to delete the HR evaluation data on its employees. The decision comes after a complaint filed by an employee concerning an access request

register and no longer has a legal representative. If an investigation in this case were to reveal an illegal processing of personal data, the right to impose

DPA (AEPD) against a university where they had had different roles, ("an employee, an employee with disciplinary proceedings, undergraduate student, master's

that CP&A maintained an online register, containing data on the cause of absenteeism in its employees. In response, it launched an own volition investigation

Court has ruled on the merits of the case. According to the Court, an appeal against an administrative decision can only be effective if the applicant is

Following an investigation, the Croatian DPA (AZOP) held that data processor, an IT company, did not take necessary measures to achieve an adequate level

by an employee of the Warsaw University of Life Sciences with the rules of data processing in force at the University is evidenced by the use by an employee

data as follows: 2 «any information about an identified or identifiable natural person (« the registered »); An identifiable natural person is a person who

thus an intentional infringement and both subjective and objective conditions for impose an infringement fee is fulfilled. Assessment of whether an infringement

assertion that the application of the legal basis justified an interest in in the present case, an assessment in concreto of all the relevant factual elements

Administration Act states: When it is stipulated by law that an administrative sanction may be imposed on an enterprise, the sanction can be imposed even if no individual

The EDPS found, after the CJEU requested for an authorisation of contractual clauses under Article 48(3)(a) of the EU GDPR, that no data transfers took