Search results

From GDPRhub
  • violated Article 5(1)(e) GDPR and Article 25(2) GDPR. As a result, the DPA issued a reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant
    77 KB (12,352 words) - 07:20, 23 April 2024
  • Personvernnemnda (Norway) - 2018-14 (15/01355) (category Article 4(11) GDPR)
    addresses that the Medical List does today, cf. GDPR Article 4, No. 11, Article 6 No. 1 letter a, Article 7 and Article 9 No. 2 letter a If current practice is
    144 KB (23,058 words) - 18:48, 5 March 2022
  • APD/GBA (Belgium) - 31/2020 (category Article 5(1)(c) GDPR)
    this case under Article 6(1)(a) or 6(1)(c)? If Article 6(1)(a) applies, do the requirements for parental consent under Article 8 GDPR also apply? Did the
    48 KB (7,926 words) - 16:56, 12 December 2023
  • AEPD (Spain) - EXP202201746 (category Article 5(1)(f) GDPR)
    infringement of Article 32 GDPR. Therefore, the Spanish DPA issued a warning sanction for each violation of Article 5(1)(f) and Article 32 GDPR. AEPD highlighted
    62 KB (9,703 words) - 13:05, 13 December 2023
  • HDPA (Greece) - 20/2020 (category Article 37(3) GDPR)
    explanatory statement of the law, Article 10 defines the Authority’s competence in compliance with Article 55 GDPR.Article 55 GDPR provides for a restriction
    29 KB (4,578 words) - 15:35, 6 December 2023
  • AEPD (Spain) - EXP202102430 (category Article 58(2)(d) GDPR)
    the claimed party, for the alleged violation of Article 32 of the RGPD, typified in Article 83.4 of the GDPR. Once the initiation agreement was notified,
    33 KB (4,835 words) - 13:26, 13 December 2023
  • HDPA (Greece) - 31/2023 (category Article 5(1)(c) GDPR)
    with the principles of article 5 par. 1 GDPR. It is no coincidence that the GDPR includes accountability (see Article 5 para. 2 GDPR) in the regulation of
    61 KB (10,257 words) - 10:15, 1 November 2023
  • Datatilsynet (Denmark) - 2020-32-1733 (category Article 17(3)(b) GDPR)
    pursuant to the Article 17(3)(b) of the GDPR. However, Statistics Denmark has been criticised for not complying with the Article 5(1)(d) of the GDPR, namely,
    16 KB (2,377 words) - 16:39, 6 December 2023
  • UODO (Poland) - ZSPU.421.3.2019 (category Article 5(1)(a) GDPR)
    provided for in Article 5(1)(a), (e) and (f), Article 5(2), Article 24(1) and (2), Article 28(3), Article 30(1)(d) and (f) and Article 32(1) of the General
    58 KB (9,357 words) - 10:02, 17 November 2023
  • IMY (Sweden) - DI-2020-11370 (category Article 44 GDPR)
    established on Article 45. Article 46.1 provides, among other things, that in the absence of a decision in accordance with Article 45.3 a personal data
    131 KB (14,752 words) - 08:36, 5 July 2023
  • APD/GBA (Belgium) - 08/2019 (category Article 12(3) GDPR)
    violated Articles 12(3), (4), 13(2)(b), 30(1)(d) and (g) of the GDPR and issued a warning by virtue of Article 58(2)(b) of the GDPR. Due to the anonimisation
    24 KB (3,843 words) - 16:51, 12 December 2023
  • VG Potsdam - VG 3 K 1458/19 (category Article 17 GDPR)
    the alert on the SIS system under Article 17(1)(d) GDPR. The reason for the data subject invoking the GDPR is that Article 53(1) Regulation (EU) 2018/1861
    23 KB (3,560 words) - 14:17, 21 February 2024
  • Commissioner (Cyprus) - 17.05.23 (category Article 5(1)(c) GDPR)
    point at which it was found to be unlawful. 3.3 More specifically, in Kyriakidis n. Republic (2013) 3 A.A.D. 629 it was mentioned in this regard: "... we
    31 KB (4,973 words) - 16:50, 6 December 2023
  • HDPA (Greece) - 56/2021 (category Article 13 GDPR)
    and Article of 11Law No. 3471/2006, in accordance with Article 13(58i2) of the GDPR in conjunction with Article 83(1)(a) of the GDPR. 5 of the GDPR, and
    54 KB (8,916 words) - 15:22, 22 February 2022
  • IMY (Sweden) - DI-2020-11397 (category Article 44 GDPR)
    of personal data of data subjects guaranteed by Article 44 GDPR and consequently breached Article 44 GDPR. The DPA issued a fine of 300,000 SEK (approx.
    121 KB (13,722 words) - 15:16, 5 July 2023
  • AEPD (Spain) - PS/00220/2020 (category Article 5(1)(d) GDPR)
    personal data a breach of Article 5(1)(d)? Can this failure to update data result in a refusal to comply with Article 17 GDPR? The AEPD held that IBERDROLA
    28 KB (4,295 words) - 14:11, 13 December 2023
  • CNIL (France) - SAN-2019-005 (category Article 5(1)(e) GDPR)
    violates Article 32 GDPR. Retaining personal data of an applicant for a lease after another applicant has been selected also violates Article 5(1)(e) GDPR
    41 KB (6,558 words) - 17:09, 6 December 2023
  • NAIH (Hungary) - NAIH/2020/193/8 (category Article 5(1)(d) GDPR)
    been deleted by the employer upon request pursuant to Article 16, Article 17 and Article 5(1)(d) GDPR (inaccuracy of personal data). Therefore, the employer
    58 KB (9,413 words) - 10:11, 17 November 2023
  • issue, the DPC held that the controller did not infringe Article 17(1) GDPR nor Article 12(3) GDPR as it duly responded to the erasure request within 30 days
    17 KB (2,411 words) - 09:25, 27 November 2023
  • pursuant to Article 17(2) DPA Act. 9. Moreover, as regards the one-stop-shop mechanism, Article 56 GDPR states: "Without prejudice to Article 55, the supervisory
    429 KB (58,279 words) - 09:12, 2 November 2022
View ( | ) (20 | 50 | 100 | 250 | 500)