Search results
From GDPRhub
- compliance with the GDPR under Article 58(2)(d) GDPR or even ban it under Article 58(2)(f) GDPR. Therefore, complaints under Article 77 GDPR should extend to33 KB (3,641 words) - 09:51, 19 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 4680/182/18 (category Article 58(2)(d) GDPR)with Article 58(2)(d) GDPR, the DPA ordered the controller to bring its processing operations into compliance with the provisions of Article 9 GDPR. The49 KB (7,496 words) - 14:44, 24 January 2024
- HDPA (Greece) - 27/2020 (category Article 58(2)(d) GDPR)recommendations that are included in the confidential report according to Article 58(2)(d) GDPR and inform the HDPA accordingly. Share your comments here! Share3 KB (224 words) - 15:35, 6 December 2023
- BVwG - W258 2217446-1 (category Article 58(2)(d) GDPR)affinity" on the power of redress under Article 58(2)(d) of the DPA. In fact, it should have relied on Article 58(2)(f) of the DSGVO. In principle, this must79 KB (12,652 words) - 09:41, 10 September 2021
- Garante per la protezione dei dati personali (Italy) - 9574709 (category Article 58(2)(d) GDPR)Moreover, the information provided as per Article 13 GDPR were not compliant with the requirements of Article 12 GDPR in light of the fact that TikTok services17 KB (2,519 words) - 15:55, 6 December 2023
- HDPA (Greece) - 20/2020 (category Article 58(2)(d) GDPR)Articles 5, 6 par. 1 point (e) and 9 par. 2 (g) GDPR 2016/679 and c) calls, pursuant to article 58 par.2 verse. d GDPR 2016/679, 401 General Military Hospital29 KB (4,578 words) - 15:35, 6 December 2023
- AEPD (Spain) - EXP202102430 (category Article 58(2)(d) GDPR)out and the resolutions issued under this article. (…)” SAW In accordance with the provisions of article 58.2 d) of the RGPD, each authority of control may33 KB (4,835 words) - 13:26, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8211/161/19 (category Article 58(2)(d) GDPR)controller in accordance with Article 58 (2) (b) of the General Data Protection Regulation and an order in accordance with Article 58 (2) (d) of the General Data42 KB (6,579 words) - 08:46, 27 January 2022
- Tietosuojavaltuutetun toimisto (Finland) - 4356/532/19 (category Article 58(2)(d) GDPR)on final judgments did not comply with Article 25(1) GDPR. Pursuant to Article 58(2)(b) and Article 58(2)(d) GDPR, the DPA reprimanded the controller for43 KB (6,671 words) - 08:49, 27 January 2022
- Tietosuojavaltuutetun toimisto (Finland) - 834/532/18 (category Article 58(2)(d) GDPR)on final judgments did not comply with Article 25(1) GDPR. Pursuant to Article 58(2)(b) and Article 58(2)(d) GDPR, the DPA reprimanded the controller for43 KB (6,677 words) - 08:47, 27 January 2022
- Tietosuojavaltuutetun toimisto (Finland) - 3216/452/17 (category Article 58(2)(d) GDPR)violated Article 5(1)(a) GDPR, Article 5(1)(c) GDPR, Article 9 GDPR and Article 25(2) GDPR. As a result, and in accordance with Article 58(2)(d) GDPR, the60 KB (9,117 words) - 14:46, 24 January 2024
- Tietosuojavaltuutetun toimisto (Finland) - TSV/26/2020 (category Article 58(2)(d) GDPR)violated Article 5(1)(e) GDPR and Article 25(2) GDPR. As a result, the DPA issued a reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant77 KB (12,352 words) - 07:20, 23 April 2024
- ANSPDCP (Romania) - 18.01.2023 (category Article 58(2)(d) GDPR)commercial messages. Consequently, pursuant to its powers under Article 58(2)(d) GDPR, the DPA ordered the controller to take technical and organizational5 KB (519 words) - 15:13, 13 December 2023
- HDPA (Greece) - 43/2019 (category Article 58(2)(d) GDPR)the GDPR within 1 month starting from the receipt of this decision; c)ordered the company comply with the Article 5(1)(a) GDPR and Article 5(2) GDPR, as5 KB (459 words) - 15:39, 6 December 2023
- ANSPDCP (Romania) - Vodafone România SA 1 (category Article 58(2)(d) GDPR)confidentiality as laid down in Article 5(1)(d) and (f) GDPR read in conjunction with the principle of accountability according to Article 5(2) GDPR. The ANSPDCP imposed5 KB (608 words) - 15:21, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.007.125 (category Article 58(2)(d) GDPR)game company to bring its processing operations into compliance with Article 12(2) GDPR as it found they should implement additional modalities to facilitate3 KB (221 words) - 16:51, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1809/452/18 (category Article 58(2)(d) GDPR)unlawful. As per Article 58(2) d, the Finnish DPA ordered the housing cooperative to bring the personal data processing activities in line with GDPR. The decision3 KB (355 words) - 13:05, 3 March 2024
- CJEU - C-46/23 - Újpest Önkormányzat Polgármesteri Hivatala (category Article 58(2)(d) GDPR)corrective powers under Article 58(2) GDPR, namely 58(2)(d) and (g) GDPR, may be exercised by the DPA on its own motion. Article 58(2)(c) GDPR, on the other hand6 KB (683 words) - 15:27, 27 March 2024
- ANSPDCP (Romania) - Fine to Dante Internațional SA (category Article 58(2)(d) GDPR)imposed two corrective measures on the controller according to Article 58(2)(c) and (d) GDPR and the fine of 14,420.4 lei, the equivalent of the amount of4 KB (414 words) - 11:04, 6 February 2024
- Tietosuojavaltuutetun toimisto (Finland) - 9401/163/18 (category Article 58(2)(d) GDPR)took place. Therefore, as per Article 58 (2) (b), DPA issued a reprimand to the controller as per and, as per Article 58 (2) (d), ordered the controller to4 KB (488 words) - 13:08, 3 March 2024
- ANSPDCP (Romania) - Fine against Telekom Romania Communications (category Article 58(2)(d) GDPR)according to Article 58(2)(d). Share blogs or news articles here! The decision below is a machine translation of the Romanian original. Please refer to the4 KB (456 words) - 15:18, 13 December 2023
- ANSPDCP (Romania) - Fine against Proleasing Motors SRL (category Article 58(2)(d) GDPR)Romanian DPA (ANSPDCP) fined leasing company €15,000 for violation of Article 32(1) and (2) GDPR after investigating a data breach reported by the company, where6 KB (732 words) - 15:17, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6609/163/19 (category Article 58(2)(d) GDPR)enshrined in Article 5(1)(c) GDPR. The Finish DPA further ordered the controller to bring its processing activities into compliance under Article 58(2)(d) GDPR13 KB (1,873 words) - 13:06, 3 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 3425/157/2019, 3578/157/2019, 3846/157/2019, 3871/157/2019, 3891/152/2019, 3918/157/2019, 4338/157/2019, 4666/154/2019, 5973/157/2019, 6773/157/2019 ja 7022/157/2019 (category Article 58(2)(d) GDPR)subjects had not suffered any financial harm. Furthermore, as per Article 58(2)(c) and (d) GDPR, the DPA ordered the controller to comply with the data subjects’4 KB (359 words) - 13:03, 3 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 1011/161/22 (category Article 58(2)(d) GDPR)reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA also ordered the controller to erase the15 KB (2,137 words) - 20:18, 27 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 8205/154/18 (category Article 58(2)(d) GDPR)processing operations in line with the provisions of the GDPR in accordance with Article 58 (2) (d). Share blogs or news articles here! The decision below12 KB (1,810 words) - 13:07, 3 March 2024
- BAC (Bulgaria) - 2606/2021 (category Article 58(2)(d) GDPR)CPDP issued NRA an order under Article 58(2)(d) supra Article 57(1)(a) and Article 83(2)(a), (c), (d), (f) and (g) of the GDPR for undertaking suitable technical13 KB (1,761 words) - 09:58, 14 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 128/182/19 (category Article 58(2)(d) GDPR)considered appropriate in accordance with Article 31(1)(b) GDPR and Article 32(2) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA ordered the controller to identify17 KB (2,339 words) - 13:39, 12 January 2024
- Tietosuojavaltuutetun toimisto (Finland) - 6629/163/21 (category Article 58(2)(d) GDPR)reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA also ordered the controller to bring its21 KB (3,204 words) - 13:37, 12 January 2024
- Tietosuojavaltuutetun toimisto (Finland) - 9885/157/19 (category Article 58(2)(d) GDPR)subject's rights, such as the right to object according to Article 21 GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA ordered the controller to ensure that data21 KB (3,097 words) - 13:40, 12 January 2024
- DPC (Ireland) - Inquiry into Airbnb Ireland UC - 28 September 2023 (category Article 58(2)(d) GDPR)infringements of Article 5(1)(c), Article 5(1)(e) and Article 6(1)(f) the DPC issued a reprimand to Airbnb pursuant to Article 58(2)(b) of the GDPR. In addition17 KB (2,411 words) - 09:25, 27 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/29/2020 (category Article 58(2)(d) GDPR)violated Article 5(1)(c) GDPR, Article 25(2) GDPR and Section 29(4) of the Finnish Data Protection Act. As a result, and in accordance with Article 58(2)(d)25 KB (3,651 words) - 09:37, 3 April 2024
- AEPD (Spain) - PS/00322/2020 (category Article 58(2)(d) GDPR)the GDPR, pursuant to Articles 58(2)(b) and (d) respectively. For the violation of Article 5(1)(f), it issued a fine of €10000, pursuant to Article 58(2)(i)26 KB (3,840 words) - 14:28, 13 December 2023
- NAIH (Hungary) - NAIH/2020/2000/5 (category Article 58(2)(d) GDPR)by the above Registry, (1) and (2) and Article 13.II.The Authority instructs the Obliged Pursuant to Article 58 (2) (d) of the General Data Protection24 KB (3,815 words) - 10:11, 17 November 2023
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 4) (category Article 58(2)(d) GDPR)notified in accordance with the data protection regulation, article 58, subsection 2, letter d. Failure to comply with an order can - unless a higher penalty25 KB (3,660 words) - 08:42, 14 September 2022
- Tietosuojavaltuutetun toimisto (Finland) - TSV/224/2023 (category Article 58(2)(d) GDPR)violated Article 5(1)(c) GDPR, Article 5(1)(e) GDPR, Article 12(2) GDPR, Article 12(6) GDPR and Article 25(2) GDPR. In accordance with Article 58(2)(c) GDPR31 KB (4,693 words) - 11:50, 6 March 2024
- AKI (Estonia) - 2.1.-1/22/1396 (category Article 58(2)(d) GDPR)RESOLUTION Article 56 (1) and (2) point 8, § 58 (1) of the Personal Data Protection Act (hereafter IKS) and Article 58 (1) point d and (2) points d, e and34 KB (5,305 words) - 08:40, 29 June 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8040/163/2019 (category Article 58(2)(d) GDPR)Art 4 (11) GDPR. In accordance with Art 58(2)(d), the Finnish DPA instructs the controller to align its process to obtain consent with the GDPR provisions29 KB (4,610 words) - 13:07, 3 March 2024
- Datatilsynet (Norway) - 21/02873 (category Article 12(2) GDPR)In an Article 60 GDPR procedure, the Norwegian DPA ordered an HR-services provider, pursuant to Article 58(2)(d) GDPR, to provide the data subject with13 KB (1,583 words) - 16:20, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9509515 (category Article 58(2)(d) GDPR)minimisation, pursuant to Article 58(2)(d). The Garante also fined the company €20000 for its breach of Articles 5(1)(a) and (c) GDPR. In determining the amount33 KB (5,342 words) - 15:52, 6 December 2023
- AEPD (Spain) - EXP202105669 (category Article 58(2)(d) GDPR)regulated in article 32 of the GDPR, which regulates the security of the treatment. IV. Article 5.1.f) of the GDPR Article 5.1.f) of the GDPR establishes45 KB (6,998 words) - 12:58, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9446730 (category Article 58(2)(d) GDPR)circumstances of the specific case (art. 58, par. 2, letter i) Regulation). 4. Order for an injunction. Pursuant to art. 58(2)(i) of the Regulation and art. 166(3)34 KB (5,420 words) - 15:51, 6 December 2023
- DSB (Austria) - D130.206/0006-DSB/2019 (category Article 58(2)(d) GDPR)in line with Article 13 GDPR. On the DSB's request, the controller declared R*** Hotels GmbH as its representative under Article 27 GDPR and sent a reply40 KB (6,007 words) - 13:59, 12 May 2023
- AEPD (Spain) - PS/00029/2020 (category Article 58(2)(d) GDPR)under Article 58(2)(b) GDPR. The Authority ordered the Health Service to carry out a DPIA and bring its processing operations in line with the GDPR within44 KB (6,943 words) - 13:49, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4431/161/21 (category Article 58(2)(d) GDPR)to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA also ordered the controller to comply with the principles54 KB (8,279 words) - 13:53, 21 March 2024
- Personvernnemnda (Norway) - 2022-13 (21/00481) (category Article 58(2)(d) GDPR)controller) about €352,555 (NOK 4,000,000) for violating Article 5(1)(f) GDPR, Article 24 GDPR and Article 32 GDPR after a serious ransomware attack led to highly45 KB (6,913 words) - 12:13, 15 March 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4282/161/21 (category Article 58(2)(d) GDPR)controller had violated Article 5(1)(f) GDPR, Article 17(1) GDPR, Article 25(1) GDPR, Article 32(1) GDPR and Article 32(2) GDPR. As a result, the DPA issued56 KB (8,980 words) - 08:47, 4 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 3831/161/21 (category Article 58(2)(d) GDPR)reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA also ordered the controller to define61 KB (9,477 words) - 13:38, 12 January 2024
- AEPD (Spain) - PS/00201/2019 (category Article 58(2)(d) GDPR)The AEPD then issued the MCP with a warning under Article 83(5)(b) and pursuant to Article 58(2)(d) ordered the MCP to adapt its information provision54 KB (9,019 words) - 14:10, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9435807 (category Article 58(2)(d) GDPR)constituted a violation of Articles 123(2) and 132-ter of the Italian Privacy Code. Applying Articles 58(2)(d) and (2)(i), the Garante ordered Iliad to adapt58 KB (9,448 words) - 15:50, 6 December 2023