Search results
From GDPRhub
- access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction (Article 18 GDPR), notification (Article 19 GDPR) or data46 KB (5,825 words) - 11:12, 7 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 918/154/2019 (category Article 58(2)(c) GDPR)longer of importance to society. As a result, and in accordance with Article 58(2)(c) GDPR, the DPA ordered the controller to comply with the data subject's26 KB (4,072 words) - 12:18, 27 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 8493/161/21 (category Article 58(2)(c) GDPR)the controller had violated Article 5(1)(a) GDPR, Article 12 GDPR, Article 13 GDPR, Article 15 GDPR and Article 25(1) GDPR. As a result, the DPA issued52 KB (7,936 words) - 22:32, 2 March 2024
- APD/GBA (Belgium) - XX/2021 (category Article 58(2)(c) GDPR)on the merits in accordance with Article 98 et seq. DPAA, to: - pursuant to Article 58.2(c) of the GDPR and Article 95(1)(5) of the DPAA , to order the17 KB (2,189 words) - 12:34, 3 August 2022
- ANSPDCP (Romania) - Fine to Dante Internațional SA (category Article 58(2)(c) GDPR)imposed two corrective measures on the controller according to Article 58(2)(c) and (d) GDPR and the fine of 14,420.4 lei, the equivalent of the amount of4 KB (414 words) - 11:04, 6 February 2024
- HDPA (Greece) - 43/2019 (category Article 58(2)(c) GDPR)the GDPR within 1 month starting from the receipt of this decision; c)ordered the company comply with the Article 5(1)(a) GDPR and Article 5(2) GDPR, as5 KB (459 words) - 15:39, 6 December 2023
- HDPA (Greece) - 7/2024 (category Article 58(2)(c) GDPR)complete, clear and reasonably certified pursuant to both Article 58(2) GDPR. and Article 21 of N. 2472/1997. Notably, the DPA focused only on the portion7 KB (795 words) - 12:05, 5 April 2024
- AEPD (Spain) - PS/00351/2019 (category Article 58(2)(c) GDPR)regard to Article 83 (2) (k) of the GDPR, Article 76 of the GDPR, ‘Sanctions and remedial measures’, provides: ‘2. In accordance with Article 83 (2) (k) of17 KB (2,739 words) - 14:31, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3425/157/2019, 3578/157/2019, 3846/157/2019, 3871/157/2019, 3891/152/2019, 3918/157/2019, 4338/157/2019, 4666/154/2019, 5973/157/2019, 6773/157/2019 ja 7022/157/2019 (category Article 58(2)(c) GDPR)subjects had not suffered any financial harm. Furthermore, as per Article 58(2)(c) and (d) GDPR, the DPA ordered the controller to comply with the data subjects’4 KB (359 words) - 13:03, 3 March 2024
- APD/GBA (Belgium) - 20/2023 (category Article 58(2)(c) GDPR)objection for data processing under Article 21 GDPR and the principle of liability under Article 2(4) GDPR and Article 24 GDPR. The complainant, the data subject14 KB (1,883 words) - 16:59, 20 March 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6722/154/2018 (category Article 58(2)(c) GDPR)subject's request to remove the search result link as per Article 58(2)(c) GDPR? Article 87 GDPR gives Member States the right to specify conditions for19 KB (3,000 words) - 13:07, 3 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 4359/163/2018 (category Article 58(2)(c) GDPR)Protection Officer shall instruct the controller in accordance with Article 58 (2) (c) of the General Data Protection Regulation to comply with the applicant's15 KB (2,249 words) - 13:05, 3 March 2024
- AEPD (Spain) - PS/00433/2020 (category Article 58(2)(c) GDPR)procedure, the AEPD understood that the defendant could have breached article 58(2)(c) GDPR: on the basis of the available evidence, the defendant did not answer23 KB (3,592 words) - 14:40, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/224/2023 (category Article 58(2)(c) GDPR)violated Article 5(1)(c) GDPR, Article 5(1)(e) GDPR, Article 12(2) GDPR, Article 12(6) GDPR and Article 25(2) GDPR. In accordance with Article 58(2)(c) GDPR31 KB (4,693 words) - 11:50, 6 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 8235/154/18 (category Article 58(2)(c) GDPR)with Article 5 (1) (c) of the General Data Protection Regulation; and (3) whether the controller should be ordered in accordance with Article 58 (2) (c)28 KB (4,501 words) - 13:07, 3 March 2024
- Datatilsynet (Denmark) - 2019-31-1424 (category Article 58(2)(c) GDPR)Thus, it violated Article 15 GDPR. The Datatilsynet issued an injunction and ordered the company, as foreseen under 58(2)(c) GDPR, to carry out a concrete33 KB (5,189 words) - 16:23, 6 December 2023
- APD/GBA (Belgium) - 137/2022 (category Article 12(3) GDPR)Belgian DPA used Article 58(2)(c) GDPR to order a controller to comply with an erasure request of a data subject pursuant to Article 17 GDPR after it failed14 KB (1,946 words) - 08:50, 29 June 2023
- Garante per la protezione dei dati personali (Italy) - 9446730 (category Article 58(2)(c) GDPR)circumstances of the specific case (art. 58, par. 2, letter i) Regulation). 4. Order for an injunction. Pursuant to art. 58(2)(i) of the Regulation and art. 166(3)34 KB (5,420 words) - 15:51, 6 December 2023
- DSB (Austria) - D130.206/0006-DSB/2019 (category Article 58(2)(c) GDPR)in line with Article 13 GDPR. On the DSB's request, the controller declared R*** Hotels GmbH as its representative under Article 27 GDPR and sent a reply40 KB (6,007 words) - 13:59, 12 May 2023
- EFTA Court - Joined Cases E-11/19 and E-12/19 (category Article 58(2)(c) GDPR)data within the meaning of Article 4(2) in the course of proceedings under both Articles 77 and 78 of the GDPR. Article 4(2) refers to disclosure as a59 KB (8,242 words) - 10:47, 17 March 2021
- CJEU - C-46/23 - Újpest Önkormányzat Polgármesteri Hivatala (category Article 58(2)(d) GDPR)corrective powers under Article 58(2) GDPR, namely 58(2)(d) and (g) GDPR, may be exercised by the DPA on its own motion. Article 58(2)(c) GDPR, on the other hand6 KB (683 words) - 15:27, 27 March 2024
- HDPA (Greece) - 33/2020 (category Article 58 GDPR)violation of Articles 5,15 GDPR, 33 Law 4624/2019. Thus, the HDPA, making use of its corrective powers of Article 58(2)c GDPR, ordered the College to provide20 KB (2,270 words) - 15:37, 6 December 2023
- BayLfD (Bavaria) - LDA-1085.1-12159/20-IDV (category Article 77 GDPR)exercise his or her rights (Article 58(2)(c) GDPR), the power to impose a fine under Article 83 GDPR (Article 58(2)(i) GDPR) does not serve to safeguard15 KB (2,168 words) - 13:06, 14 September 2021
- APD/GBA (Belgium) - 145/2022 (category Article 58(2)(c) GDPR)complaint with Article 5(1)(c) GDPR. However, Article 58(2)(b) GDPR contains the authority of the DPA to reprimand a controller. Article 58(2)(c) GDPR contains18 KB (2,545 words) - 16:10, 25 October 2022
- APD/GBA (Belgium) - 140/2022 (category Article 16 GDPR)processing on the merits in accordance with Article 98 et seq. WOG, to: - on the basis of Article 58.2.c) GDPR and Article 95, §1, 5° WOG to the controller order17 KB (2,477 words) - 08:51, 29 June 2023
- APD/GBA (Belgium) - 157/2023 (category Article 21(2) GDPR)within the meaning of Article 100 of the WOG. The Disputes Chamber has thus decided, on the basis of Article 58.2.c) GDPR and Article 95, § 1, 5° of the WOG17 KB (2,723 words) - 16:34, 26 January 2024
- APD/GBA (Belgium) - 189/2022 (category Article 58(2)(c) GDPR)treatment on the merits in accordance with Article 98 et seq. WOG , to: - on the basis of Article 58.2, c) GDPR and Article 95, § 1, 5 ° WOG, the controller order21 KB (3,086 words) - 08:57, 11 January 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1788/152/22 (category Article 58(2)(c) GDPR)within the meaning of Article 15 (4) of the Data Protection Regulation. Decision and justification of the EDPS Pursuant to Article 58 (2) (c) of the Data Protection17 KB (2,540 words) - 10:11, 7 June 2022
- Garante per la protezione dei dati personali (Italy) - 9883613 (category Article 58(2)(c) GDPR)accuracy and updating of data as provided in Art 5 par 1 let d GDPR. Following Art 58 2 c and g GDPR, the Guarantor finds the data subject´s complaint well-founded17 KB (2,544 words) - 12:49, 19 June 2023
- Tietosuojavaltuutetun toimisto (Finland) - 10587/161/21 (category Article 58(2)(c) GDPR)the request. On 23 July 2021, the DPA exercised its power under Article 58(2)(c) GDPR and ordered the controller to comply with the access request. However24 KB (3,719 words) - 15:57, 1 June 2022
- APD/GBA (Belgium) - 128/2023 (category Article 58(2)(c) GDPR)concluded a prima facie breach of Article 15 GDPR and Article 17 GDPR in combination with Article 12(3) GDPR and Article 12(4) GDPR, because the controller did23 KB (3,272 words) - 09:19, 13 September 2023
- UODO (Poland) - ZSPR.440.331.2019.PR.PAM (category Article 58(2)(c) GDPR)with complete information pursuant to Article 15(1) GDPR. Therefore, using its power laid down in Article 58(2)(c) GDPR, the DPA ordered the controller to28 KB (4,389 words) - 16:10, 21 December 2021
- APD/GBA (Belgium) - 33/2022 (category Article 58(2)(c) GDPR)of the ACL: - to order the data controller, pursuant to Article 58.2.c) of the GDPR and Article 95, § 1, 5° of the LCA, to comply with the complainant's26 KB (4,116 words) - 15:36, 30 March 2022
- Court of Appeal of Brussels - 2020/AR/582 (category Article 58(2)(c) GDPR)investigation in accordance with article 91 2. In this regard, it follows from the text of the contested decision: Pursuant to Article 95, §2 of the Law of 3 December26 KB (3,871 words) - 07:59, 24 August 2023
- APD/GBA (Belgium) - 09/2023 (category Article 58(2) GDPR)controller has acted in violation of Article 12.3 and 12.4 GDPR, as well as Article 17.1 GDPR. 2 1 Article 12 GDPR […] 3. The controller shall provide the16 KB (2,239 words) - 19:52, 15 February 2023
- APD/GBA (Belgium) - 14/2023 (category Article 58(2)(c) GDPR)termination. Article 5(1)(c) was therefore also violated. The DPA concluded that Article 5(1)(a), 5(1)(c) and 6(1) were violated and pursuant Article 58(2)(c) ,33 KB (4,897 words) - 14:05, 1 March 2023
- APD/GBA (Belgium) - 10/2023 (category Article 15(1)(c) GDPR)set out by Article 12(4) GDPR. The DPA ordered the controller to comply with the access request pursuant Article 58(2)(c) GDPR and Article 95(1)(5) LCA14 KB (1,967 words) - 15:07, 22 February 2023
- APD/GBA (Belgium) - 02/2023 (category Article 12(3) GDPR)hearing on the merits in accordance with Article 98 ff. WOG , at: - on the basis of Article 58.2, c) GDPR and Article 95, §1, 5° WOG, to order the defendant15 KB (2,043 words) - 15:41, 24 January 2023
- APD/GBA (Belgium) - 04/2023 (category Article 5(1)(c) GDPR)result, the controllers acted in 1 2 3 contravenes Articles 5.2 and 12.2 GDPR, as well as Article 17.1 GDPR. 1 Article 5.2 GDPR. The controller is responsible20 KB (2,870 words) - 10:07, 1 February 2023
- APD/GBA (Belgium) - 06/2023 (category Article 15(1)(c) GDPR)pursuant to Article 12(2) GDPR. The DPA ordered the controller to comply with the access request pursuant to Article 58(2)(c) GDPR and Article 95(1)(5) LCA16 KB (2,242 words) - 10:12, 8 February 2023
- IMY (Sweden) - DI-2020-10696 (category Article 58(2)(c) GDPR)pursuant of Article 58(2)(b) GDPR. The DPA further ordered the controller to comply with the access request pursuant of Article 58(2)(c) GDPR and to deal57 KB (6,743 words) - 13:54, 1 February 2023
- Garante per la protezione dei dati personali (Italy) - 9867661 (category Article 58(2)(c) GDPR)sufficient by the supervisory authority. Therefore, pursuant to Article 58(2)(c) and (g) GDPR, the Italian DPA ordered the controllers to take action in order38 KB (5,945 words) - 15:47, 19 April 2023
- WSA Warszawa - II SA/Wa 607/20 (category Article 58(2)(c) GDPR)it and the applicants, i.e. on the basis of Article 6(1)(b) GDPR. However, pursuant to Article 17(3)(e) GDPR, the right to request from the controller the47 KB (7,617 words) - 09:33, 26 November 2021
- APD/GBA (Belgium) - 11/2023 (category Article 17(1)(c) GDPR)according to Article 19 GDPR. The DPA held that the controllers could have breached Article 21(2) GDPR, Article 21(3) GDPR and Article 17(1)(c) GDPR in combination25 KB (3,639 words) - 13:51, 28 February 2023
- APD/GBA (Belgium) - 160/2022 (category Article 12(3) GDPR)based on Article 95, § 1, 5° WOG (law establishing the Belgian DPA) and Article 58(2)(c) GDPR. This order was not a final decision in light of article 100 WOG17 KB (2,401 words) - 16:49, 29 November 2022
- Article 83 GDPR (category GDPR Articles) (section (6) Non-compliance with orders pursuant to Article 58(2) GDPR)flows by the SA pursuant to Article 58(2) GDPR or failure to provide access in violation of Article 58(1) GDPR. Article 83(6) GDPR is a superfluous provision55 KB (7,622 words) - 14:04, 7 November 2023
- Article 6 GDPR (category GDPR Articles) (section Tension with Article 5 and 12 GDPR in case of routine reliance on Article 6(4) GDPR)possible "legitimate interest" under Article 6(1)(f) GDPR. Equally to Article 6(1)(c) GDPR, Article 6(2) and (3) GDPR require that Union or Member State108 KB (17,005 words) - 15:39, 18 March 2024
- BVwG - W214 2228346-1 (category Article 4(2) GDPR)its decision on the following legal bases: Article 12, Article 15, Article 57(1)(f), Article 58(2)(c) and Article 77(1) of the Basic Data Protection Regulation65 KB (10,246 words) - 09:42, 10 September 2021
- consent under Article 6(4) GDPR and further processing for a compatible purpose under Article 6(4) GDPR. See the commentary on Article 6(4) GDPR for details51 KB (6,355 words) - 08:25, 18 April 2024
- (see Article 52 GDPR) and shall be provided with various competencies (Articles 55, 56 GDPR), tasks (Article 57 GDPR) and powers (Article 58 GDPR). For125 KB (16,328 words) - 16:01, 8 March 2024