Search results

German Supreme Court (BGH - VI ZR 60/21), the court came to an opposite conclusion that an online platform collecting and publishing personal data of doctors

a company had obtained access to an employee's emails. In the first case, the company had accessed her inbox due to an acute situation where they needed

fines Vodafone €10,000 for transferring personal data from their customers to an advertising company without prior consent. After requesting the provision

The Portuguese DPA considered that an organisation is the controller of personal data when employing the services of a direct marketing company to promote

addresses in the "To" section instead of the "BBC" section while sending an email. At an unspecified time, the controller, a Romanian water supplier, incurred

In October 2020, the Polish DPA received an anonymous tip informing about this incident. The DPA started an investigation and requested information from

that CP&A maintained an online register, containing data on the cause of absenteeism in its employees. In response, it launched an own volition investigation

data as follows: 2 «any information about an identified or identifiable natural person (« the registered »); An identifiable natural person is a person who

associated an email address and/or phone number with a business account (whether as a mandatory requirement of switching prior to September 2019, or on an optional

In 2019, after conducting an internal risk analysis and a Data Protection Impact Assessment (DPIA) the hospital introduced an encryption solution for secure

CI Plus module as an alternative to a loan receiver (quasi an adapter that replaces the zapping receiver and can be inserted into an existing receiver

information. That is not an improper purpose. Court can deal with abuse of process if shown If there is an abuse in seeking a remedy for an ulterior purpose,

the same results. An automated message informing clients that the account was no longer functioning, for instance, would have been an adequate solution

controller applies for an amendment to this decision. The Deputy Data Protection Commissioner also gives the data controller an order in accordance with

AP has started an official investigation. This decision covers the period from 2012 to enwith2018. 1.2Process flow On 4 September 2018, an AP supervisor

cf. Article 24. An employee in a municipal health care center had access to highly sensitive personal data (image files) through an incorrectly configured

this is whether it is an individual case or a system-wide problem weave. If, in the case of an individual application, there is an indication that it is

"personal data": any information about an identified or identifiable natural person ("the interested party"); an identifiable natural person shall be considered

The EDPS found, after the CJEU requested for an authorisation of contractual clauses under Article 48(3)(a) of the EU GDPR, that no data transfers took

followed such an approach in the assessment of fines based on the fine concept of the Data Protection Conference of 19.10.2019. Such an assessment method