Search results

of the information gathered, the DPA held that the controller had violated Article 5(1)(f) GDPR, Article 17(1) GDPR, Article 25(1) GDPR, Article 32(1) GDPR

2020/369 Subject matter: Information for the individual, Legal bases, Consent, Education Legal act: Opinion The Information Commissioner (hereinafter: IP) has

LA 104/19, ECLI:DE:OVGNI:2020:0722.11LA104.19.00 Article 1 (1) GG, Article 2 (1) GG, § 7aF DSG ND, § 43 VwGO Proceedings VG Osnabrück, 30 January 2019,

credit information register are widely released for various purposes. Pursuant to Section 19 of the Credit Information Act, payment default information can

(violated article: Article 25) and those in accordance with Article 83(5) of the General Data Protection Regulation ( Article violated: Article 5) to the

Regulation) Article 1, paragraph 2, Article 5, Article 6, paragraph 1, subparagraph f, Article 17(1)(a), (c) and (d), Article 17(3)(a), Article 21(1) Judgments

people to read complete information by means of a link to this information. This was a violation of Article 12. Based on Article 13(2)(a) GDPR and WP29

details. Enforcement Notice issued by the Information Commissioner concerning contraventions of Article 5(2) and Article 35 UK GDPR by the Home Office ENFORCEMENT

decision have been taken by the controlled. 43. In view of the above, the restricted panel concludes that Article 38.3 of the GDPR does not have been respected

complained, the then X AG, said the Thuringian state commissioner for data protection and freedom of information with reference to Section 4f Paragraph 2 BDSG

January 1978 relating to information technology, files and liberties (hereafter referred to as the Data Protection Act or the Act of 6 January 1978) and

not completely determined by it. This already follows from Article 1.3, Article 20.3 and Article 93.1 No. 4a of the Basic Law. According to these, the commitment

company of the information and electronic commerce (hereinafter referred to as the ISESA), as provided for in 43.1 of the said Act. Article 85 of Law 39/2015

entitled to erasure under Article 17(1)(d) GDPR, as the data processing was not lawful. In any case, the requirements of Article 6 GDPR were no longer met

provide, beyond the mere information about the data loss itself, that the information and measures mentioned in Article 33(1)(b) to Article 33(1)(d) GDPR must

on the users device. Article 82 of the French Data Protection Act The DPA explained that Article 82 of the French Data Protection Act required the provider

protection law and further orders of the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate - LfDI - requiring him

exclude information from your response to a SAR merely because it is difficult to access. The Act deals with the situation where supplying information in permanent

the Spanish Act transposing the e-Privacy Directive? The AEPD held that there had been an infringement of Article 22(2) of the Information Society Services

applicable law 33. The first paragraph of Article 87 of the Data Protection Act, Article I of Title III of the Act provides: this Title shall apply without