Search results

Following an audit, the Luxembourg DPA (CNPD) imposed a fine of €18,700 on a company because of four breaches relating to the role and position of its

March to [...] April 2020, with varying frequency, to an individual address e-mail address of an employee of the Company These lists included only administrative

imposition of an administrative fine and an injunction to appoint a data protection officer against the municipality. A. On the imposition of an administrative

Article 15(1) GDPR, but instead introduces an independent provision. The wording of Article 15(3) creates an obligation on the controller to provide the

held that according to § 59 (4) of the Federal Data Protection Act (BDSG), an authority obliged to provide information to a data subject may only request

In 2019, after conducting an internal risk analysis and a Data Protection Impact Assessment (DPIA) the hospital introduced an encryption solution for secure

act, cannot give rise to an infringement of the GDPR. 30. The Disputes Chamber draws attention to the presence or absence of an intention does not constitute

credit registration. With an A3 coding, it is registered whether it concerns a write-off or a remission. After all, an A3 coding with an end date shows that

identified, the GP proposed to the patients, at the first contact, or with an active recall, an individual assistance plan (PAI); - until 2018, the GP only communicated

Metropolitan Court in an administrative lawsuit can be challenged. The emergency does not affect the time limit for bringing an action. The application

homosexuality, political parties or diseases. The plaintiff was shown an advertisement for an Austrian politician based on the analysis that he resembled other

require a national court, called upon to give a ruling on an application for an injunction against an intermediary whose services are used by a third party

indirectly, in particular by reference to an identifier, such as a name, an identification number, localisation data, an online identifier or one or more factors

and organisational measures to ensure an adequate level of security. A company called Gureak Lanean suffered an attempt of hacking of their servers. The

Italy held that when an individuals is asked to consent to the processing of their personal data by an algorithm in order to reach an automated decision

by Article 6(1) GDPR, after hiring a handwriting expert to determine that an alleged signature was fake. The Bulgarian DPA examined a complaint lodged

The data protection commissioner's office requested an explanation from the data controller with an explanation request dated July 4, 2023. On 10 August

controller applies for an amendment to this decision. The Deputy Data Protection Commissioner also gives the data controller an order in accordance with

require a certain degree of seriousness to be taken into account. An employer dismissed an employee for having allegedly faked their sick leave. The employer

decision that there is: - an infringement of Article 5 (1) a), b) and c) and (2) of the GDPR and Article 24 (1) of the GDPR; and - an infringement of article