Search results

defined under Article 2(1)(a) Directive 95/46 where a third party has additional knowledge required to identify a data subject. b) Whether Article 7(1)(f) prevents

under Article 3(1) Directive 95/46. The court looked at the term personal data under Article 3(1) Directive 95/46 and Article 2(a) Directive 95/46 which

light of Article 4 of Directive 95/46, which sets out that each Member State has to apply the national provisions it adopts pursuant to Directive 95/46 to the

to transfer of personal data according to Article 25 Directive 95/46. Whether the provisions of Directive 95/46 are in conflict with the general principles

scope of the Data Protection Directive 95/46 under the exceptions stipulated in Article 3(2) of the Data Protection Directive 95/46? (2) Whether personal data

binding obligation of secrecy. Recital 171: Repeal of Directive 95/46/EC and Transition Phase Directive 95/46/EC should be repealed by this Regulation. Processing

particular electronic commerce, in the Internal Market (‘Directive on electronic commerce’), Directive 2001/29/EC of the European Parliament and of the Council

previous Data Protection Directive 95/46/EC. Some of the principles are also reflected in Article 8 of the EU Charter of Fundamental Rights (EU Charter),

referred to in point (a) of Article 46(3); (i) to authorise administrative arrangements referred to in point (b) of Article 46(3); (j) to approve binding

implement aspects of the GDPR and the Law Enforcement Directive. Article 3(2) of the previous Directive 95/46/EG already exempted the rather sensitive area of

requirements from Article 9(2) and Article 9 (3) GDPR, but will also require an additional concomitant legal basis contained in Article 6(1) GDPR. However

previously existing definition under Article 2 (a) Directive 95/46/EC. The Directive itself derives the definition from Article 2 (a) Convention 108, according

between Article 21(3) GDPR and Article 17 GDPR on the right to erasure must be considered. The tight relationship between Article 21(3) and Article 17(1)(c)

establishes that Directive 95/46/EC applies to matters not covered by the provisions of the EPD. Given that Article 94 GDPR repeals Directive 95/46/EC and replaces

Article 94 - Repeal of Directive 95/46/EC 1. Directive 95/46/EC is repealed with effect from 25 May 2018. 2. References to the repealed Directive shall

access (Article 15 GDPR), rectification (Article 16 GDPR), deletion (Article 17 GDPR), restriction of processing (Article 18 GDPR), objection (Article 21 GDPR)

subject (Article 12(2) GDPR), respond and communicate the measures taken (Article 12(3) and (4) GDPR), the principle of freedom from costs (Article 12(5)

pass a national data protection act that was aligned with Directive 95/46/EC. Directive 95/46/EC allowed Member States to adapt the rules to national frameworks

and to the well-being of natural persons. Recital 3: Directive 95/46/EC Harmonisation Goal Directive 95/46/EC of the European Parliament and of the Council

legislator or intended. Compared with the previous Directive 95/46, Article 15(3) GDPR constitutes an additional right to receive a copy of all personal data

GDPR (Article 3)’, 12 November 2019 (Version 2.1), p. 6-7 (available here). EDPB, ‘Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)’, 12

for such performance. Article 7 GDPR regulates the "conditions for consent". It specifies the definition of consent set out in Article 4(11) GDPR and, by

decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; (b) Chapter VII on cooperation

(“EDPB”). The EDPB replaces the Article 29 Working Party (“WP29”), the former advisory body established under Directive 95/46/EC. Notably, the powers granted

decisions adopted pursuant to paragraph 3 of this Article and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC. 5. The Commission shall, where

operations. Recital 89: Abolishment of Indiscriminate General Notification Directive 95/46/EC provided for a general obligation to notify the processing of personal

processing (Article 36(3)(c) GDPR); the contact details of the Data Protection Officer (DPO) (Article 36(3)(d) GDPR); a copy of the DPIA (Article 36(3)(e) GDPR)

processed. 3. Adherence to an approved code of conduct as referred to in Article 40 or an approved certification mechanism as referred to in Article 42 may

Category:Article 33 GDPR There was no equivalent to Article 33 GDPR under the Data Protection Directive 95/46/EC. Indeed, Article 17 of the Directive only

Individuals with Regard to the Processing of Personal Data established by Directive 95/46/EC. It should consist of the head of a supervisory authority of each

Laundering Directive and the Europol Regulation. Noting that a broader reading of Article 98 GDPR is supported by the wording of Article 2(3) GDPR, which

decisions in Category:Article 25 GDPR The Data Protection Directive did not contain a similar provision. Although Article 17 DPD Recital 46 had a similar thrust

and freedoms of individuals", as stated in Article 35(1) and further elucidated in Article 35(3) and Article 35(4) GDPR. The WP29 developed a list of criteria

those answers prove to be inaccurate, within the meaning of Article 6(1)(d) of Directive 95/46, for example due to the fact that, by mistake, the examination

other binding obligation of secrecy. Article 10 GDPR is a complementary provision to the Law Enforcement Directive (LED). It aims to ensure that criminal

Charter of Fundamental Rights of the European Union ("CFR"), as well as Directive 95/46/EC. In the event that such verification is successful, the agreement

exercising of powers of SAs. It concerned the interpretation of Article 28 GDPR of Directive 95/46, the GDPR predecessor. It stays relevant with regard to concepts

point of legislative history, Article 85 GDPR is a development of Article 9 of the 95/46 directive of the European Union. Article 9 obliged Member States to

The roots of Article 39 GDPR can be partially retraced to the GDPR’s predecessor, the Directive 95/46/EC (DPD). In particular, Article 18 DPD mentioned

Regulation (GDPR): A Commentary, Article 38 GDPR, p. 702 (Oxford University Press 2020). In addition, although Directive 95/46/EC did not require organisations

withdraw consent under Article 7(3), object under Article 21 GDPR or if the processing is in fact compliant with the principles of Article 5(1) GDPR. Simply

decisions in Category:Article 34 GDPR As with that provision, there was no equivalent to Article 34 GDPR in the Data Protection Directive 95/46/EC. Additionally

policy under Article 13 should not be too long. Article 12 GDPR may be limited by Union or national Law in accordance with Article 23 GDPR. Article 12(1) GDPR

(e.g. Article 25 (1) and (2), Article 28(1), Article 32(1) GDPR, Article 89(1) GDPR). These measures can also be regarded as measures under Article 24(1)

proceedings under Article 79 GDPR can be brought both against a controller (as defined under Article 4(7) GDPR) and a processor (as defined under Article 4(8) GDPR)

point, it is important to note that Article 13(1)(f) GDPR, Article 14(1)(f) GDPR, Article 15(1)(c) GDPR and Article 15(2) GDPR, make specific reference

the relevance of Article 29 GDPR were rooted in the fact that Article 28(3)(b) GDPR already seems to cover much of the scope of Article 29 GDPR. More specifically

practices published under Article 70(3) GDPR. Though Article 70(3) GDPR already obliges the EDPB to make these public, Article 71(2) GDPR ensures that the

the processing prohibition in Article 58 (2) (f) of the GDPR. Article 58 of the GDPR replaced Article 28(3) of Directive 95/46/EC on the protection of individuals

see commentary to Article 51(3) GDPR bellow. Article 8(3) of the Charter of Fundamental Rights of the European Union ("CFR") and Article 16(2) of the Treaty

to Article 42(7); (p) specify the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies under Article 42;

Individuals with Regard to the Processing of Personal Data established by Directive 95/46/EC. It should consist of the head of a supervisory authority of each

shall apply from 25 May 2018. There is no relevant recital for Article 99 GDPR. Article 99 GDPR sets out the dates of the Regulation's entry into force

Buchner, DS-GVO BDSG, Article 59 GDPR, margin number 7 (C.H. Beck 2020, 3rd Edition). See Ziebarth, in Sydow, Marsch, DS-GVO/BDSG, Article 59 GDPR, margin numbers

information society service(s)." According to Article 4(25) GDPR, which in turn refers to Article 1(1) of Directive (EU) 2015/1535, an "information society service"

ECJ on household exceptions under the GDPR (Article 3(2) Directive 95/46/EC), which corresponds to Article 2(2)(c) GDPR. While the Austrian legislator

and (3) GDPR), inform him or her about the measures taken (Article 12(3) and (4) GDPR), the right to receive this service free of charge (Article 12(5)

Category:Article 37 GDPR The notion of appointing a DPO has its roots in Article 18(2) of the Data Protection Directive 1995 (Directive 95/46/EC) (DPD)

assessment should not be mandatory. Article 22 GDPR has its roots in Articles 12a and 15 of the 95/46/EC Data Protection Directive (DPD). One of the main differences

procedure under Article 65(3)(2) GDPR could also be applied to decisions made by the EDPB. The procedural regulations in Article 65(3)(2) GDPR establish

with Article 13, Article 14 GDPR gives expression to the principle of transparency enshrined in Article 5(1)(a) GDPR and further defined in Article 12 GDPR

to in Article 46(2)(d) GDPR, contractual clauses referred to in Article 46(3)(a) GDPR, or binding corporate rules within the meaning of Article 47 GDPR

compliance. Article 40 GDPR elaborates upon a pre-existing provision under the Directive 95/46/EC (Data Protection Directive – DPD), specifically Article 27(1)

that process them. This was already the case under Article 8(7) of the DPD, the precursor of Article 87 GDPR. In many Member States, the processing of NIN

Chair of the Board. Article 75 GDPR establishes the existence of, and governs the functioning of the secretariat of the Board. Article 75 GDPR outlines the

the code. Although the Data Protection Directive 95/46/EC (DPD) included a provision on codes of conduct (Article 27(1) DPD), this did not include any information

organisation), Article 45(5) GDPR (revocation, change of such determinations); Articles 46(2)(c) and (d) GDPR (standard protection clauses); Article 47(3) GDPR

approach in regards to the EDPB. Article 42 of the Charter of Fundamental Rights of the European Union ("CFR") and Article 15(3) Treaty on the Functioning of

decisions in Category:Article 74 GDPR For more on this point, see Article 72 GDPR. Dix in Kühling, Buchner, DS-GVO BDSG, Article 74 GDPR, margin number

hybrid of regulation and directive.” Whilst it establishes an EU-wide penalty regime for violations under Article 83 GDPR, Article 84(1) GDPR dispenses with

dispute resolution mechanism under Article 65 GDPR in connection with Article 63 GDPR is triggered (Article 60 (4) GDPR). Article 60(2) GDPR clarifies that also

in point (d) of Article 46(2) and in Article 28(8); (e) aims to authorise contractual clauses referred to in point (a) of Article 46(3); or (f) aims to

right to receive compensation under Article 82 GDPR was not included in the initial draft of Article 80 GDPR (then Article 73) and was only inserted later

that falls outside the scope of Article 57 GDPR should be deemed inadmissible for the purposes of Article 31 GDPR. Article 31 GDPR can be read as a supporting

out pursuant to Article 83(1) GDPR. This part of Article 83 concerns the principle of "unity of action" (see above). With Article 83(3) GDPR, the legislator

(subjective requirement of the damage) mentioned by Article 82(3), to which we refer. The first sentence of Article 82(2) states that a controller involved in processing

referred to in Article 64. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 93(2). Recital

rules, do not fall within the scope of this article. → You can find all related decisions in Category:Article 48 GDPR Kuner, in Kuner, Bygrave, Docksey,

restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been

derogation from Article 64(3) and Article 65(2), an urgent opinion or an urgent binding decision referred to in paragraphs 2 and 3 of this Article shall be adopted

to in Article 42(5) and approved by the supervisory authority which is competent pursuant to Article 55 or 56 or by the Board pursuant to Article 63; (c)

confidentiality obligations were already in place under Article 28(7) of the GDPR's predecessor, Directive 95/46/EC. Article 54(1) GDPR mandates Member States to provide

the exchange of knowledge between them. This way, Article 50 GDPR expands the exhortation under Article 57(1)(g) GDPR that calls for cooperation between

Press 2020). Spiecker et al., GDPR Article-by-Article Commentary (2023), p 1090. Spiecker et al., GDPR Article-by-Article Commentary (2023), p 1090. CJEU

for the data subject (Article 57(3) GDPR). Pötters, Werkmeister in Gola, DS-GVO, Article 77 GDPR, margin number 4 (C.H. Beck 2022, 3rd edition). CJEU - C-132/21

of the notion of religion in general. For instance, under Article 10(1)(b) of Directive 2011/95/EU, “[t]he concept of religion shall in particular include

the meaning of this Article. Those implementing acts shall be adopted in accordance with the examination procedure set out in Article 93(2). Recital 110:

in compliance with the GDPR. Article 28(3)(h) GDPR enables such a task in case processors are used. According to Article 28(3)(h) GDPR, the processor should

absence of an adequacy decision pursuant to Article 45(3), or of appropriate safeguards pursuant to Article 46, including binding corporate rules, a transfer

under the terms referred to in Article 46(2)(f) GDPR. One substantial difference between Article 42(1) GDPR and Article 42(2) GDPR is that in the former

this Article. 2.   The delegation of power referred to in Article 12(8) and Article 43(8) shall be conferred on the Commission for an indeterminate period

protection principles (Article 5), determination of the legal basis for processing (Article 6), implementation of security measures (Article 32), notification

GDPR (Article 31 GDPR). Direct liability of the representative is limited to the obligations set out in Article 30 and Article 58(1)(a) GDPR. Article 27(5)

certain standards of clarity (Article 61(3) GDPR). Requests are imperative and, subject to specific exceptions (Article 61(4) and (5) GDPR), must be fulfilled

subjects - which would be counterproductive. Article 11 GDPR is meant to address this matter. Under Article 11(1) GDPR, when a processing operation does

on the interests of the hosting State within the meaning of Article 346(1) TFEU. Article 62(3) GDPR foresees two main forms of joint operations: (i) conferring

and 14 GDPR), access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), notification

information in the course of an investigation, in accordance with Article 58(1) GDPR. Article 90 GDPR was drafted with a view to regulate potential conflicts

commentary to Article 60 GDPR, Article 61 GDPR, Article 62 GDPR, Article 63 GDPR, Article 64 GDPR, Article 65 GDPR, Article 66 GDPR and Article 56 GDPR. The

studies. Hence, Article 89(2) and (3) GDPR also allow for specific derogation to the GDPR for these purposes, as further detailed below. Article 89(1) GDPR

cases concerning the interpretation of Article 28(1) of Directive 95/46/EC ("DPD"), the Regulation's predecessor. Article 28(1) DPD established the existence

DSGVO, Article 81 GDPR, margin number 3 (Jan Sramek 2021). Bergt in Kühling, Buchner, DS-GVO BDSG, Article 81 GDPR, margin number 5 (C.H. Beck 2020, 3rd edition)

opening clause under Article 88(1) GDPR, any rules introduced must meet the criteria imposed by Article 88(2) GDPR. Lastly, Article 88(3) GDPR imposes an obligation

incompatible occupation. For example, Article 52(2) GDPR requires SA members to remain free from external influence and Article 52(3) GDPR entails a prohibition

DS-GVO BDSG, Article 78 GDPR, margin number 6 (C.H. Beck 2020, 3rd edition); Körffer in Paal, Pauly, DS-GVO BDSG, Article 78 GDPR, margin numbers 3-5, (C.H

required in principle (see hereunder Article 65(2) GDPR) to adopt a decision under Article 65 GDPR is reached, since Article 64 GDPR only requires a simple majority

processing), Article 57 GDPR (tasks of SAs), Article 58 GDPR (powers of SAs), as well as Article 65 GDPR (dispute resolution by the board), Article 63 GDPR (consistency

consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and (b) the processing is

the functioning of decisions adopted on the basis of Article 25(6) or Article 26(4) of Directive 95/46/EC. In its adequacy decisions, the Commission should

terms should the weighting provided for in Article 7.f) of Directive 95/46 / EC be carried out -current article 6.1.f) of the General Regulation (EU) - between

conclusion follows from reading Article 5(3) of the ePrivacy directive in conjunction with Article 2(h) of Directive 95/46/EC, and noting that active consent

considered the controller (Article 2(d) Directive 95/46) in respect of the processing (within the meaning of Article 2(b) Directive 95/46) that it carries out

controller in Article 82 of French Data Protection Act, which is justified by the reference made by Article 2 of the ePrivacy Directive to Directive 95/46/EC on

definition set out under Article 2(d) Directive 95/46 and that NRW did not have legal standing to bring a class action suit under Directive 95/46. The Higher Regional

other countries, although it contemplated several exceptions. Following Directive 95/46/EC, the Ley Orgánica de Protección de Datos de Carácter Personal (Organic

literary purposes, only Article 24, Article 26, Article 28, Article 29, Article 32, and Article 40- Article 43 applies, following § 3. Special categories of

Google LLC violated Articles 5 et seqq. GDPR in connection with Article 28(3)(a) and Article 29 GDPR. The DSB fully upheld the complaint with regard to the

journalistic purposes within the meaning of Article 9 of Directive 95/46; (3) Whether Article 17 and principles of Directive 95/46 preclude publication of data collected

not be based on Article 45. Article 46.1 provides, among other things, that in the absence of a decision in accordance with Article 45.3 a personal data

Schedule 2 states that the GDPR provisions Article 13(1) to (3), Article 14(1) to (4) and Article 15(1) to (3) do not apply to personal data consisting

established on Article 45. Article 46.1 provides, among other things, that in the absence of a decision in accordance with Article 45.3 a personal data

case must be qualified as the EU controller as referred to in Article 2(d) of Directive 95/46. 40 The fact that the Administrator of a Fan Page uses the Facebook

this context Article 29 of the Data Protection Act 2019 establishes exceptions in Article 9(1) GDPR, Article 15 GDPR, Article 16 GDPR, Article 18(1)(a) GDPR

documents: its Article 2 lit c refers to Directive 95/46/EC (now the GDPR) and leaves it unaffected. Art 4(1)(f) and Art 5(d) of Directive 2011/24/EU explicitly

Thus, article 1, paragraph 2, of the "ePrivacy" directive provides that "the provisions of this directive specify and supplement Directive 95/46/EC" of

passed the first data protection law in 1979 (BGBl I Nr. 565/1978). Directive 95/46/EC was implemented by the Data Protection Act 2000 (Datenschutzgesetz

These acts were replaced in 2000 with the national implementation of Directive EC/95/46 through the Act on Processing of Personal Data (Persondataloven).

public interest grounds referred to in Article 8(4) of Directive 95/46 or in Article 9(2)(g) of Directive 95/46. Regulation 2016/679 and in compliance

personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). An English translation is available

either. 3.4. The right of inspection that was previously laid down in article 12 of the Privacy Directive 95/46 has now been included in article 15 of the

not be based on Article 45. Article 46.1 provides, among other things, that in the absence of a decision in accordance with Article 45.3 a personal data

Therefore, given that Article 6(1), Article 5(1)(a), Article 5(1)(d), Article 5(1)(c), and Article 14 GDPR were infringed in connection to Article 5(1)(b), the

GDPR, Article 9 GDPR, Article 10 GDPR, Article 30 GDPR and Article 34 GDPR, as well as the provision of the PDPA governing processing of personal data

not be based on Article 45. Article 46.1 provides, among other things, that in the absence of a decision in accordance with Article 45.3 a personal data

imprisonment.
 
 
 The DPA
 The DPA was enacted pursuant to Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995

is applicable. Article 2(2)(a) and (b) of the GDPR represents partly a continuation of the first indent of Article 3(2) of Directive 95/46. Therefore, the

such data and repealing Directive 95/46 / EC (General Data Protection Regulation, hereinafter “GDPR”); In view of the law of 3 December 2017 establishing

and 6 of Directive 95/46/EC remains relevant to this day. Article 6.1 of the GDPR in fact repeats the terms of article 7 of the directive 95/46/EC - the

not answer this question. 3 Decision The high Council: - answers the questions in the manner described above in 3.1.11 and 3.2.3; - estimates the costs of

repealing Directive 95/46/EC (General Regulation on the free movement of data protection), hereinafter referred to as RGPD ; Having regard to the law of 3 December

complaint under Article 77 GDPR was very clear and limited in scope. However, the DSB went on to assert a violation of Article 12 GDPR and Article 15(1)(h) GDPR

the nation of legitimate interests of the data controller under Article 7 of Directive 95/46 / EC, pp. 16-17. It is quite clear that email addresses are not

and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the AVG; Having regard to the law of 3 December 2017

affects him or her. The provision is modelled on its predecessor, Article 15 of Directive 95/46/EC. According to its wording, it appears to be a right of the

was a controller within the definition of a controller under Article 2(d) of Directive 95/46. The company offered educational services through a fan page

"controller" in Article 82 of the Data Protection Act, which is justified by the reference made by Article 2 of the ePrivacy Directive to Directive 95/46/EC on the

paragraph 38 ff, in particular paragraph 46 f on Article 12 lit a of Directive 95/46). In this regard, the ECJ (in RZ 46) states: "If the person's right of access

2, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3, 59.3

the e-Privacy Directive refers to Directive 95/46/EC, and in accordance with art. 94,paragraph 2 AVG should all references to Directive 95/46 / EC should

meaning of the first paragraph of Article 2 of Directive 2002/58, read in conjunction with Article 2(b) of Directive 95/46. The information therefore was

right of access previously laid down in Article 12 of the Privacy Directive 95/46 has now been included in Article 15 of the AVG. The purpose of this right

the obligations and safeguards of Directive 95/46 and Regulation 2016/679 (GDPR). The Court explained that the Directive and GDPR do not indicate that EU

aforementioned Directive refers to Directive 95/46/EC (Data Protection Directive), which is decisive for the processing of personal data (ErwGr. 89, Art. 95 of Directive

of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter 'the Regulation')

"ePrivacy" directive and the GDPR, Article 1(2) of this directive provides that "the provisions of this directive specify and supplement Directive 95/46/EC "of

such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "DGPS");Considering the law of 3 December 2017 establishing

delist an article based on the "right to be forgotten". The AEPD issued a decision related to the right to be forgotten under Directive 95/46/EC. Google

verification of its correctness and to an amendment under Article 12 (b) of Directive 95/46. 46. ​​In those circumstances, extending the right of access

application of the Data Protection Directive 95/46/EC and was further specified there (see Articles 2, 4, 6, 7, 12 and 14 DSRL 95/46/EC; see ECJ, judgment of 13

and 5 (3) of Directive 2002/58, read in conjunction with Article 2 (h) of Directive 95/46 and Regulation 2016/679 4 Article 6 (11) and Article 6 (1) (a)

violation of Article 6(1) GDPR; 2. Did not provide the complainant with enough information prior to the processing, in violation of Article 13 GDPR; 3. Processed

free movement of such data and repealing Directive 95/46/EC (the General Data Protection Regulation), are: Article 5 Principles for the processing of personal

data subject is a child. " (49) Article 6 continues the corresponding provision in the previously applicable Directive 95/46 / EC of 24 October 1995. Practices

articulation. Thus, Article 1(2) of the ePrivacy Directive provides that the provisions of this Directive specify and supplement Directive 95/46/EC of the European

taken pursuant to paragraph 3 of this article and of decisions taken on the basis of Article 25(6) of the Directive 95/46/EC. 5. When the information available

provisions of Articles 1 (3) and 15 (1) of the said Directive No. 2002/58 , which provide for the following: Article 1 3 - This Directive does not apply to activities

such data, and repealing Directive 95/46 / EC (general regulation on data protection), hereinafter GDPR; Considering the law of 3 December 2017 creating

provided for in Article 5(1)(a), (e) and (f), Article 5(2), Article 24(1) and (2), Article 28(3), Article 30(1)(d) and (f) and Article 32(1) of the General

20See Article 29 Working Party, Opinion 06/2014 on the notion of legitimate interests of the data controller under Article 7 of Directive 95/46/EC (WP

Chapter 1.3.3 and Annex 2D, and Annex 3 of the complainant's opinion of 22 January 2019 (OZ 1 p 52, 83 ff and 185 ff). The findings regarding 1.3. are based

removed by the lender'. 3.5.13.3. The Minister's response in 2011 as well as in 2017, at the time of the implementation of Directive 95/46/EC, indicates that

controller’s new privacy policy violated Article 5(3) of the ePrivacy Directive (Directive 2002/58/EC). The Article only allows the controller to process

Protection Directive (EU Directive 2002/58 / EC, ePrivacy Directive) and Electronic Communications Act § 2-7 b, which implement Article 5 (3) of the Communication

to Article 7(e) of Directive 95/46/EC remains relevant to this day. Article 6(1) of the GDPR takes over the wording from Article 7 of Directive 95/46/EC

expense, which would also be contrary to the conditions laid down in Article 3(1) of Directive 2004/48, which requires that measures to ensure the respect of

including Article 129 WEC which implements Article 5.3 of Directive 2002/5815 (hereinafter, "ePrivacy Directive"), in accordance with Article 14 § 1 of

install such a system at its own expense, which is also a breach of "Article 3(1) Directive 2004/48, which requires that measures to ensure the respect of IP

are, by definition, personal data within the meaning of Article 2(a) Directive 95/46, now Article 4(1) GDPR since they must enable Constantin Film Verleih

relevant even though Directive 95/46 was repealed since this condition of necessity is maintained under Article 6.1 b) to f) of the GDPR. Article 6.1 of the GDPR

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing

communication, the data subject cannot rely on either Article 12 (a),of Directive 95/46 or of Article 8 (2) of the Charter the right to obtain a copy of theoriginal

with the principlesthe quality of the data laid down in Article 6 of Directive 95/46 or Article 5Regulation 20161679 and, on the other hand, to the basic

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC [the General Data Protection Regulation]) require, in addition to

referred Question 1 Is Article 1(15)(c) of Directive (EU) 2018/843, amending the first subparagraph of Article 30(5) of Directive (EU) 2015/849 on the prevention

approved appeal of Article 5(1)(a), Article 12(1), Article 13(1) and Article 13(2). The appeal for Article 5(1)(c), Article 6(1) and Article 8 GDPR was not

02/2021 - 14/26 3. Motifs 3.1 Compétence de la Chambre de Résolution des Litiges (Article 2 AVG ; Article 4 WOG) 55. Conformément à l'article 2, paragraphe

species. Article 6.1 of the GDPR in fact reproduces the terms of Article 7 of Directive 95/46 / EC 10 of which it is the equivalent. 51. The Article 29 Group

by virtue of Article 29 of Directive 95/46/CE, which with the entry into force of article 94.2 of the RGPD that repeals the directive 95/46 is changed to

such data, and repealing Directive 95/46 / EC (general regulation on the data protection), hereinafter GDPR; Considering the law of 3 December 2017 creating

the means 8. A first plea is based on the violation of Article 28. I and 28.3, Article 32 and Article 44 of Regulation (EU) 2016/679 of the European Parliament

administrative documents , to which Directive 95/46 is not directed (ECJ, ibid., para. 46). 92 The ECJ also clarifies that the directive leaves it up to the member

access to Article 12 of the Privacy Directive (95/46/EC), which directive has been replaced by the GDPR, the purpose of the Privacy Directive, as the court

in accordance with Article 21 paragraph 2, d) the personal data were processed unlawfully, [...]' . In paragraph 3 of the same article it is defined that

Para. 1 and Para. 2, Art. Article 25(1), Article 30(5), Article 32(1) and (2), Article 34(1), Article 35(1) and Article 35(3). or Art. 37 Para. 1 lit.

possible violation of Article 82 of the French Data Protection Act, which in turn implements Article 5(3) of the ePrivacy Directive into the French legal

data and repealing Directive 95/46/EC 95/46/EC (General Data Protection Regulation), hereinafter AVG; Having regard to the Act of 3 December 2017 establishing

and to the revocation of Directive 95/46/EC (General Data Protection Regulation), hereinafter “GDPR”; Having regard to the law of 3 December 2017 establishing

the Legal Professional Privilege Exception: The purpose of Directive 95/46/EC (the Directive) was to regulate the activities of data controllers on a territorial

decision on Article 47 of the Charter of Fundamental Rights of the European Union (hereinafter: the Charter) in relation to Article 22 of Directive 95/46 / EU

repealing Directive 95/46/EC (General Regulation on the free movement of data protection), hereinafter referred to as RGPD ; Having regard to the law of 3 December

repeal of Directive 95/46/EC (General Data Protection Regulation) Article 1, paragraph 2, Article 5, Article 6, paragraph 1, subparagraph f, Article 17(1)(a)

of personal data, on the free movement of data and on the repeal of Directive 95/46/EC (General Data Protection Regulation - Regulation (EU) 2016/679 -

95/46 that the LOPD made at that point, article 7.f) of the Directive was of direct application. Article 7.f) of Directive 95/46, the text of which was practically

instruction, under Article 28(1) GDPR. Thus, it has not been decided on whether or not MaCom could process information in accordance with Article 6(3)(a), (1)(a)

cross-border traffic. The case was decided under the national implementation of 95/46/EC. The investigation started after the DPA was notified of a personal data

processing personal data, on the free movement of data and on the repeal of Directive 95/46 / EC (General Data Protection Regulation, hereinafter : "GDPR"), OJ

{kenk DOS 2019-06201) dismissing her complaint on the basis of Article 95 § 1, 3 of the Act of 3 December 2017 establishing the Data Protection Authority {hereinafter

its legal basis under Article 6(1)(f) The Disputes Chamber proceeds to dismiss the complaint in accordance with article 95 , § 1, 3° WOG, giving three motives

14.2 that § 3 continues the legal situation that followed from the Personal Data Act 2000 § 7 and the EU Privacy Directive 95/46 / EC Article 9. The provision

and repealing Directive 95/46/EC (General Regulation on Data Protection), hereinafter referred to as the DPA; Having regard to the Law of 3 December 2017

of personal data and on the free movement of such data and repealing Directive 95/46/EC, "General Data Protection Regulation" (hereinafter: "Regulation");

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC, "General Data Protection Regulation" (hereinafter the "Regulation");

data (in hereafter GDPR) - repealing Directive 95/46/CE (RGPD) - and the provisions in article 22 of Organic Law 3/2018, of December 5. On the other hand

(f), Article 5(2), Article 6(1), Article 7(1), Article 24(1), Article 25(1), Article 32(1)(b), Article 32(1)(c) and Article 32(1)(b), Article 32(1)(c) and

2016/679 ", p. 3, Group Article 29 of Directive 95/46 / EC with document no. 1 8 / EN / WP 262 of 06-02-201 8 entitled "Guidelines on Article 49 of Regulation

least one of the legal bases provided for by Article 7 of Directive 95/46/EC and Article 6.1(b) of that Directive further requires that the purposes must comply

Protection Ordinance Article 5, paragraph Article 5 (2) 1, letter c and letter f., Article 5, paragraph Article 6 (1) (a) Article 32 (1), (1), (33) 1 and

interpretation of Article 55(3) GDPR would not cover this as judicial activity. Therefore, the complaint is not admissible in accordance with Article 130 Paragraph

In that regard, neither the wording of Article 2(d) of Directive 95/46, nor any other provision of that directive, permits the conclusion that the purposes

personal data personnel and the free movement of such data, and repealing Directive 95/46 / EC; Having regard to the law of 1 August 2018 on the organization

security and to prevent the 42See Directive 95/46/EC, Recital 46. Underlining the AP. 43See, among other things, caseZ2003-0145,p.3. 44 45See CBP Guidelines: Security

The case was brought under Directive 95/46. It is remarkable that the Supreme Court held, that ready under Directive 95/46 consent that was required in

personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, with the

movement of such data and on repealing the Directive 95/46/EC (General Data Protection Regulation) SL EU L119. 3 Article 6 of the General Data Protection Regulation

data, as well as the free movement of such data and which repeals the directive 95/46 / CE (General data protection regulation); Given the Legislative Decree

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)). The storage of the plaintiff's

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing

movement of such data and on repealing the Directive 95/46/EC (General Data Protection Regulation) SLEU L119 and Article 34 of the Law on the Implementation of

of personal data and on the free movement of such data and repealing Directive 95/46 / EC (general regulation on the protection of data) (Acts. Office. EU

established in Article 12(3) and (4) GDPR. Therefore, the Belgian DPA found the controller to have breached Article 15 GDPR in conjunction with Article 12(3) and

of personal data, on the free movement of data and on the repeal of Directive 95/46 / EC (General Data Protection Regulation, OJ L 119/1 of May 4, 2016

with Article 5 paragraph 1 point c, Article 9 paragraph 1, Article 58 paragraph 2 point f, point g and point i and with Article 83 paragraph 2 and 3, Article

objection for data processing under Article 21 GDPR and the principle of liability under Article 2(4) GDPR and Article 24 GDPR. The complainant, the data

data data and repealing Directive 95/46/EC (hereinafter referred to as the General Protection Regulation data) SL EU 119, Article 34 of the Law on the Implementation

data and repealing Directive 95/46/EC (General data protection regulation) SL EU L119. The General Data Protection Regulation in Article 4, Paragraph 1, Point

data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as the GDPR; Pursuant to the Act of 3 December 2017 establishing

regard to the processing of personal data – 3 – and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

for violating Article 5(1)(c) and Article 5(1)(e) GDPR. The DPA of Berlin fined Deutsche Wohnen SE for violating Article 5(1)(c) and Article 5(1)(e) GDPR

be interpreted broadly (cf. on the comparable legal situation under Directive 95/46 the judgement of the ECJ of 6 November 2003, C 101/01, Rs Lindqvist

of Article 6(1)(c) instead of Article 6(1)(f) as the District Court held. The Court of Appeal ruled that the District Court's discussion of Article 6(1)(c)

on the repeal of Directive 95/46/EC (General Protection Regulation data) SL EU L119. 3 The General Data Protection Regulation in Article 4, Paragraph 1,

respectively. 46 In the fourth place, the referring court infers from Article 4(1)(b) and (c), Article 8(1) and (2) and Article 10 of Directive 2016/680 that

5.1.c) of the GDPR pursuant to Article 95, §1, 3° of the LCA; - pursuant to Article 58.2.c) of the GDPR and Article 95, § 1, 5° of the LCA, to order the

of personal data and on the free movement of such data and repealing Directive 95/46 / EC SLEU L119 (hereinafter referred to as the "General Regulation")

than Directive 95/46, because the GDPR's right to object does not limit the grounds on which data subjects may request erasure pursuant to Article 17 para

from the ePrivacy Directive implementation and specify and supplement the GDPR. § 3(1) mentioned in this case corresponds to Article 5(3) of the ePrivacy

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing

personal data and on the free movement of such data and repealing Directive 95/46 / EC Article 2 (1) of Regulation (EU) No 2016/679 (hereinafter: the General

specific categories of information in Article 8 (1) and (5) of Directive 95/46 or in Article 9 (1), Article 10 (1) and Article 10 of Regulation 2016/679, the

Since these operations are explicitly and unconditional in Article 2(b) of Directive 95/46, must be regarded as treatment within the meaning of that provision

breaches of Article 14. 1-2 combined with Articles 12.3 and 12.1 of the GDPR, in Article 15. 1 of the GDPR (combined with Article 12.3 and Article 12.2. Of

as by Article 28(2) and (3) The obligation to adopt technical and organizational measures to ensure the security of the processing as by Article 32. The

violation of Article 5, Article 6, and Article 25 GDPR. It ordered the controller to comply with the data subject's erasure request pursuant to Article 17(1)(d)

information or to preserve authority (Article 3, paragraph 3 of the Media Act). Also, the Law on Media in Article 7 paragraph 3 stipulates that a person who statements

in Article 9 of Directive 95/46 / EC are not applicable to the former Article 9 of Directive 95/46 / EC - the counterpart provision of now Article 85 GDPR

such data, and o repealing Directive 95/46/EC (hereinafter: General Data Protection Regulation) SL EU 119, Article 40 and Article 96 of the Law on General

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, OJ 2016 L 119/1, p. 1; hereinafter

of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: GDPR) , that his personal data will be erased which

persons the free movement of such data and Directive 95/46 / EC Regulation (EU) 2016/679 repealing Directive (hereinafter referred to as General alleged

which also refers to Article 34 (1) of the Data Protection Regulation. 3 (b). The Data Inspectorate should note that Article 34 (2) does. 3, points to the data

the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) Article 2(1) This Regulation shall apply to the processing

previous European Directive on personal data protection: “In this context, there are three cumulative in Article 7 (f) of Directive 95/46 conditions that

movement of such data, and repealing Directive 95/46 / EC 1The guidelines concerning DPOs were adopted by the “Article 29” working group on 13 December 2016

of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter GDPR; In view of the law of 3 December 2017 establishing

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing

with Article 7 and Article 60 of the Act of 10 May 2018 on personal data protection (Journal of Laws of 2019, item 1781) and pursuant to Article 31 and

envisaged as follows. 17. In paragraph 3.3. Legal Protection' of the AVG Implementation Act, Article 34 reads as follows: Article 34. Applicability of the General

collects saidrequirements.28 In this regard, article 7, letter f), of Directive 95/46 - (current article 6.1.f) of the RGPD) - fixesthree cumulative requirements

Appeal Brussels - 2020/AR/1160 -p. 3 3. Legal framework for the restricted debate. 3.1. Article 108 of the Law of 3 December 2017 establishing the Data

data and until revocation of Directive 95/46/EC (General Data Protection Regulation screening) (hereinafter: GDPR);  Article 288, paragraph 2 of the Convention

also met. 3.3. In the matter 3.3.1. Legal situation: Article 12 of Regulation (EU) 2016/679 of the European Parliament and of the CouncilArticle 12, of Regulation

repeal of Directive 95/46 / EC (General Data Protection Regulation) OJ EU 119. The General Data Protection Regulation stipulates in Article 4 (1) (1) that

free movement of such data and repealing Directive 95/46 / EC (General Regulation on data protection). Article 2, paragraph This Regulation shall apply

Disputes Chamber was arrested in accordance with Article 92, 1 ° WOG and hasdecided on the basis of Article 94, 3 ° WOG to handle the complaint without theTo

violation of Article 6, paragraph 1, letter c) and e), paragraph 2 and paragraph 3, letter b), of the Regulation and Article 19, paragraph 3, of the Code

personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation ) (Journal of Laws UE L 119

of such data and repealing Directive 95/46/EC (general Data Protection Regulation), hereinafter GDPR; In view of the law of 3 December 2017 establishing

powers under Article 58(2) GDPR and impose on the respondent the responsibility to restore the fulfilment of Article 5(1)(a) GDPR and of Article 5(1)(b-f)

envisaged as follows. 22. In paragraph 3.3. Legal Protection' of the AVG Implementation Act, Article 34 reads as follows: Article 34. Applicability of the General

such data and repealing Directive 95/46/EC (general Data Protection Regulation), hereinafter GDPR; Having regard to the law of 3 December 2017 establishing

the file (Article 95, §2, 3 ° WOG) 7. On 7 August 2019, a copy of the file will be sent to the defendants. Page 3 Substance decision 35/2020 - 3/11 8. On

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter AVG; Having regard to the Act of 3 December 2017 establishing

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter DPA; Having regard to the Law of 3 December 2017 establishing

came into force on 25 May 2018. The previously applicable Privacy Directive (Directive 95/46/EC) and the Personal Data Protection Act (Wbp) based in part on

requirements of Article 6(1)(a) in conjunction with Article 7 GDPR, which cannot be superseded by relying on Article 6(1)(b) GDPR? Is Article 5(1)(c) GDPR

of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation; AVG). This concerns the measure

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC, hereinafter: GDPR), a claim for damages requires that a natural

the Processing of personal data, free movement of data and repeal of Directive 95/46/EC (General Data Protection Regulation - GDPR). The defendant has a

the Data Protection Act 1998 sought to implement Article 23 of the (old) Data Protection Directive (95/46/EC) which provided:
 
 "Member States shall

for more details. Article 2: Material scope Article 2.2.c: Exclusively personal or domestic activity Article 3: Territorial scope Article 4.1: Personal data

of personal data and on the free movement of such data and repealing Directive 95/46/EC, "General Data Protection Regulation" (hereinafter, "Regulation");F

applicable (cf. Article 99(1) and (3) AVG). As of that date, the AVG is binding and directly applicable in every Member State (Article 99(3) AVG), i.e.: irrespective

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC, "General Data Protection Regulation" (hereinafter the "Regulation");

and which repeals Directive 95/46 / EC ", OJ no. 205 of 4.09.2018. by reason of the "Principle of legality", referred to in Article 1 of Law 689/1981,

apply from 25 May 2018 and repealed the Privacy Directive (Directive 95/46/EC) on the same date (see Article 94 GDPR). That the initiating petition in this

and repealing Directive 95/46/EC (General Regulation on the data protection), hereinafter “the GDPR”; Having regard to the Law of December 3, 2017 establishing

or her data. The 3rd main section of the DSG implements Directive (EU) 2016/680. In accordance with Article 2(2) thereof, this Directive applies to the processing

that a life insurance company had breached Article 5(1)(a) GDPR, Article 5(1)(c) GDPR, Article 9 GDPR and Article 25(2) GDPR as its as its practice was to

the GDPR, in particular Article 5 (1) GDPR, article 24 and article 28 GDPR, all this based on article 58.2, d) GDPR and article 100, §1, 9 ° WOG, within

subject to the derogations and exceptions provided for in Art. 9 of Directive 95/46 (see ECJ 01.06.2017, C-345/17, Rz 58 [Sergejs Buivids and Datu valsts

such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the Law of 3 December 2017 establishing

connection with Article 31, Article 58(1)(e) and (f) in connection with Article 83(1-3) and Article 83(5)(e) of Regulation 2016/679 of the European Parliament

such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "DGPS");Considering the law of 3 December 2017 establishing

more details. Article 2: Substantive scope Article 2.2.c: Exclusively personal or domestic activity Article 3: Territorial scope Article 4.1: Personal

of Justice of the European Union at paragraph 99: "Article 12(b) and Article 14(a) of Directive 95/46 must be interpreted as meaning that, when analysing

such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the "DGPS");Considering the law of 3 December 2017 establishing

processing special categories of data, cf. Article 32(1)(b) GDPR, Article 32(1)(d), Article 24 and Article 35, cf. Article 5. In May 2019, a municipality reported

to the description requirement in Article 33, para. 3. 3.3. Article 34 of the Data Protection Regulation and Article 5 (1) 1, letter a. Assessment of the

of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulations) (OJ EU L 119, 04.05.2016, p

accordance with Article 38.3 of the AVG 5. On 5 October 2021, the Disputes Chamber decided on the basis of article 95, §1, 1°and article 98 of the CPC that

would also be subject to the provisions of Article 6.1(e) DSGVO in conjunction with Article 6.1(b) DSGVO. Article 2, 28.2 no. 2 BayDSG without the consent

00 Repeal of Directive 95/46 / EC (General Data Protection Regulation). Integrity Protection Authority Record number: DI-2020-10538 2 (3) Date: 2021-01-22

Klarna violate Article 15 of the GDPR? The DPA considered that Klarna failed to process the request within the timeframe required by Article 12(3) and without

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC [the General Data Protection Regulation]) require, in addition to

ofcontroller (article 4.7 of the GDPR), the scope of the GDPR (article3.1 of the GDPR), the right to erasure (article 17 of the GDPR) and its powers (article 58.2of

data, as well as on the free movement of such data and which repeals Directive 95/46 / EC, "General data protection regulation" (hereinafter "Regulation");

for violating Article 5(1)(f) GDPR, Article 5(1)(a) GDPR, Article 5(2) GDPR, Article 12 GDPR, Article 13 GDPR, Article 14 GDPR, Article 24(1) GDPR, and

such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; Having regard to the Act of 3 December 2017 establishing

pursuant to Article 100, §1, 5° WOG, to order a disqualification for the violation of Article 5.1, a), Article 5.2, Article 6, Article 12.1, Article 14.1 a)

of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter GDPR; In view of the law of 3 December 2017 establishing

movement of such data and Directive 95/46 / EC (hereinafter: the General Decree), point 7 of the first paragraph of Article 49 of the Personal Data Protection

violation of article 21 of the LSSICE, classified as serious in article 38.3.d) and c) of said rule, for the alleged infringement of article 48.1.b) of the

paragraph c) of paragraph 1 of article 4 of Directive EC/95/46, of October 24, 1995, as well as aa fnea c) of paragraph 3 of article 4 of Law 67/98, of 26 October

authority or the data protection delegate in accordance with Article 20 of Directive 95/46/EC and which are carried out in a way that has not changed since

repeal of Directive 95/46 / EC (GDPR), Art. 51, 52, 53.1, 53.3, 53.4 and 54.1 (a) - (e) The Self-Government Act for Åland, section 1, section 3, subsection

for example, Article 5, Paragraph 1, Subsections c–e, Article 6 and 12–22 of the Data Protection Regulation article. According to subsection 3 of the same

on the basis of the notification, Article 57 (1) f) of the General Data Protection Regulation and Article 38. § Article 1Regulation (EU) 2016/679 of the

of personal data and the free movement of such data, and repealing Directive 95/46 / EC (known as "RGPD"), relating to the excessive nature of the data

company was not compliant with Article 13 GDPR. The CNPD held that the controller infringed Article 5(1)(c) GDPR and Article 13 GDPR and decided to: - impose

and the repeal of Directive 95/46/EC (General Data Protection Regulation) Article 5, paragraph 1, subparagraph c, Article 25, Article 58, paragraph 2, subparagraph

incorrect applies Article 12.3 of the AVG. However, this is not correct. 33. Article 12.3 of the GDPR reads (in its relevant parts): ''Art. 12.3 The controller

and on the free movement of such data and on 08-657 61 00 Repeal of Directive 95/46 / EC (General Data Protection Regulation). Integrity Protection Authority

data, Directive 95/46 / EC (hereinafter referred to as the General Data Protection Regulation or Decree), point 7 of the first paragraph of Article 49 of

CJEU makes the following considerations, for what interests us here: "Directive 95/46 is not limited to providing that its provisions will not apply to the

of personal data and on the free movement of such data and repealing Directive 95/46/EC, 'General Data Protection Regulation' (hereinafter 'the Regulation');

personal data. 3. Justification for the Authority's decision 3.1. Basis of processing Processing of personal data shall be in accordance with Article 6 (2) of

of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter 'the Regulation');

the Data Protection Working Group established on the basis of Article 29 of Directive 95/46/EC, a Guidelines on transparency facilitating the application

follows that the consent of Article 2 (f) and Article 5 (3) of Directive 2002/58, read in conjunction with Article 4 (11) and Article 6 (1) (a) of Regulation

processing of personal data and on the movement of such data and repealing Directive 95/46 / EC EC (General Data Protection Regulation, GDPR) for violation of

under article 7 of the Directive 95/46 / CE ”, dated 04/09/2014. Although Opinion 6/2014 was issued for favor a uniform interpretation of Directive 95/46

decision. [The equivalent GDPR Article to Article 48(3)(a) EU GDPR is Article 46(3)(a) GDPR, and Article 50(1)(d) EU GDPR is Article 49(1)(d) GDPR.] Share blogs

of personal data and on the free movement of such data and repealing Directive 95/46/EC (basic data protection regulation) - DSGVO. With regard to Camera

personal data and on the free movement of such information and repealing Directive 95/46 / EC (general data protection regulation).

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter AVG; Having regard to the Act of 3 December 2017 establishing

companies in both Belgium and the UK, violated Article 15(1) GDPR, Article 15(3) GDPR and Article 12(3) GDPR GDPR for deleting data instead of providing

57(1)(a) and Article 58(2)(b) in connection with Article 5(1)(f), Article 24(1), Article 25(1), Article 32(1) and (2) of 2 of Regulation EU 2016/679 of the European

of Justice directly clarify the understanding of the EU Privacy Directive (Directive 95/46), the judgments are relevant for the interpretation of the new

processing carried out is in violation of Article 5(1)(f) GDPR, Article 25(1) GDPR, Article 32 GDPR and Article 35 GDPR. Especially, the controller cannot

personal data and on the free movement of such data and on repealing Directive 95/46 EC (General Data Protection Regulation) and Articles 34 and 36 of the

movement of such data, and repealing Directive 95/46 / EC 1The guidelines concerning DPOs were adopted by the “Article 29” working group on 13 December 2016

CJEU states that "the manifestation of will referred to in Article 2(h) of Directive 95/46 must, in particular, be "specific", in the sense that it must

these operations are explicitly listed and unconditional in Article 2(b) of Directive 95/46, must be qualified as treatment in the sense of said provision

subject, violated Article 12 of the Decree. Article 15 (4), Article 15 (1) and Article 18 (1) (c) respectively. The Obliged - a III.2. and III.3. infringed Article

rules in the Data Protection Regulation [1], cf. Article 6 (1). Article 17 (1) (e) and Article 17 (1) 3, letter b. However, the Danish Data Protection Agency

personal data and on the free movement of this data and the repeal of Directive 95/46/EC (hereinafter the Data Protection Regulation), the data subject has

in the workplace, the Working Group for Data Protection from Article 29 of Directive 95/46/EC (currently the European Data Protection Board) expresses the

such data and revocation of Directive 95/46/EC (General Data Protection Regulation), hereinafter GDPR; In view of the law of 3 December 2017 establishing

In the application of Article 5(3) and Article 2(f) of Directive 2002/58/EC in conjunction with Article 2(h) of Directive 95/46/EC, does it make any difference

with Article 9(2)(a) GDPR and Article 6(1)(a) GDPR. Thus, the Danish DPA held that the processing was also not following the principles of Article 5(1)

Justice directly clarify the understanding of the EU Personal Data Directive (Directive 95/46), the judgments are also relevant for the interpretation of the

of access under Article 15 of the Data Protection Regulation. 3.2. It follows from the Data Protection Act [2] § 22, para. 1, that Article 15 of the Regulation

of such data and repealing Directive 95/46 / EC (General Data Protection Regulation), hereinafter GDPR; In view of the law of 3 December 2017 establishing

additional submissions regarding Article 83(3) GDPR (“Meta IE Submissions on Article 83(3) GDPR”). December 2021 On3December2021,theIESAshareditsDraftDecisionwiththeCSAs

question in the Directive is not broader in this respect than Article 12 (a). of Directive 95/46 / EC, which the first paragraph of Art. Article 8 of Regulation

concept of legitimate interests of the data controller under Article 7 of Directive 95/46 / EC, WP217, p. 24. 5No complain personally, her sole proprietorship

had fulfilled its obligation to provide information pursuant to Article 12(3) and Article 4(7) of the Basic Law (Voriger SuchbegriffDSGVONächster Suchbegriff)

reactivated according to plan. It follows from Article 28 (1) of the Data Protection Regulation Article 3 (3) (f) requires the data controller to assist the

processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (Basic Data Protection Regulation, OJ L 119 of 04.05.2016, p. 1,

data, as well as the free circulation of such data and which repeals Directive 95/46 / CE, "General Data Protection Regulation" (hereinafter, "Regulation");

permission in Article 6 (1) (c) GDPR and argues that it is the Viennese in accordance with Article 5 (3) of the EpiG in conjunction with Article 1 (2) (e)

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC, "General Data Protection Regulation" (hereinafter the "Regulation");

information to the public, violating Article 24 GDPR. The decision discusses as well, the relationship between directive 95/46/EC and GDPR. The DPA highlighted

violating Article 5(1) GDPR Article 6 (1) GDPR Article 6(4) GDPR Article 9 GDPR Article 14 GDPR Article 30 GDPR Article 35 GDPR and Article 36 GDPR. The

specific categories of information in Article 8 (1) and (5) of Directive 95/46 or in Article 9 (1), Article 10 (1) and Article 10 of Regulation 2016/679, the

be covered by Article 13(1)(d) or (f) of that directive? 3) The referring courts ask whether Article 12(a) of Directive 95/46 and Article 8(2) of the Charter

Protection Agency's decision It follows from Article 28 (1) of the Data Protection Regulation Article 3 (3) (f) requires the data controller to assist the

data and repealing Directive 95/46/EC, 'General Data Protection Regulation' (hereinafter referred to as 'GPSD'); HAVING REGARD TO Article 154(1)(g) of the

request under Article 15 and with the one month deadline under Article 12(3). Was Google Ireland Ltd in breach of its obligations under GDPR Article 15(1) and

personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection ) (Journal of Laws UE L

personal data and on the free movement of such information and repealing Directive 95/46 / EC (general data protection regulation). [2] See preamble recital

then enter a password before gaining access to the computer. 3.3.3 Control of logging 3.3.3.1 Facts The OLVG information security & privacy policy states

of these data and which repeals Directive 95/46/EC (General Regulation of data protection, GDPR) defines in its article 4.14 the biometric data as “personal

data, as well as the free circulation of such data and which repeals Directive 95/46 / CE, "General Data Protection Regulation" (hereinafter the "Regulation");

of personal data and on the free movement of such data and repealing Directive 95/46/EC, GDPR, of which the company was informed on the same day. During

market participants. Specifically, these are Sections 17(3), 3(5) ApBetrO, 43 AMG, 11(1) sentence 1 no. 3, no. 7 and no. 11 HWG, and Section 14(2) no. 1 BerufsO

(2), Article 60, Article 101, Article 101a and Article 103 of the Act of 10 May 2018 on personal data protection (Journal of Laws of 2019, item 1781) and

norm therefore by article 19 of the LOPD as business data. We consider relevant the legal basis by which, according to the article Article 65 of the LOPD

personal data and on the free movement of such data, and repealing the Directive 95/46/EC (GDPR); Having regard to law no. 78-17 of January 6, 1978, as amended

with Article 5 (2). 1 (c). The Data Inspectorate also refers to the Article 29 Group's guidelines on the right to data portability WP242 rev.01 [3], page

such data and repealing directive 95/46/EC (general data protection regulation), hereinafter AVG; Having regard to the law of 3 December 2017 establishing

sentence nullity regime provided for in article 615 of the CPC is applicable to orders - paragraph 3 of article 613 of the CPC. Regarding the defendant

of personal data and the free movement of such data, and repealing Directive 95/46 / EC; Having regard to the law of 1 August 2018 on the organization

repealing Directive 95/46/EC (as regards (hereinafter GPRD), an offense under Article 83(5)(a) of the GPRD and described as very serious in article 72.1. a)

which also refers to Article 34 (1) of the Data Protection Regulation. 3 (b). The Data Inspectorate should note that Article 34 (2) does. 3, points to the data

processing was therefore in breach of Article 5(1)(a) and Article 6(1)(c) of the GDPR. The DPA also ruled out Article 6(1)(f) on the grounds of domestic law:

under Article 6 of the Data Protection Directive, as well as having a legitimate "criteria" for processing data under Article 7 of that same Directive. It

such data and repealing Directive 95/46/EC, 'General Data Protection Regulation' (hereinafter 'GPSD'); Having regard to Article 154(1)(g) of the Personal

Data Protection Regulation (2016/679) Article 12 (4), Article 17 (3), Article 21 (2) and (3), Article 25 (2), Article 58 (2) (b) Section 2 of the Health Care

this Directive, Directive 95/46/EC remains unaffected. According to Article 94, paragraph 2, GDPR, references to Directive 95/46/EC are considered references

of personal data and on the free movement of such data and repealing Directive 95/46/EC, "General Data Protection Regulation" (hereinafter Regulation); HAVING

security are reported in a timely manner in future. 4.3. Article 34 of the Data Protection Regulation Article 34 (1) of the Data Protection Regulation 1, it appears

European Union, pursuant to Article 44 of this text: - adequacy decisions (Article 45); - the appropriate guarantees (Article 46); In the absence of an equivalent

infringement of Article 5.1 b) in conjunction with Article 6.4. AVG, on article 5.1 a) in conjunction with article 6.1. AVG and on article 5.1 c) GDPR has

provision of Article 267.3 TFEU. 267 (3) TFEU, which determines the statutory judge in the dispute (see BVerfGE 128, 157 <188>; BVerfG, Order of the 3rd Chamber

general data protectionArticle 5 (1) (a), Article 5 (2), Article 12 (1) and (4) ofArticle 14, Article 15 and Article 21 (4).1.3. The Authority condemns

one hand, with the principles of data quality set out in Article 6 of Directive 95/46 or Article 5 of Regulation 2016/679 and, on the other , to the basic

accountability (Article 5 (2) and 24 (1), (2) GDPR), privacy by design (Article 25 (1) GDPR) and as controller towards its data processors (Article 28 GDPR).

case law formulated with regard to Article 7(e) of Directive 95/46/EC remains relevant today even though Directive 95/46 has been repealed, since this condition

meaning of Article 77 (1) GDPR had not been raised by the plaintiff, it was a "submission" within the meaning of Article 28 (4) of Directive 95/46/EC of the

this instance, the controller sought to rely upon Article 6(1)(e) GDPR and Article 9(2)(j) GDPR. Article 6(1)(e) GDPR establishes a lawful basis for the

data, as well as on the free movement of such data and which repeals Directive 95/46 / CE (General data protection regulation, hereinafter "Regulation");

the processing is based on Article 6(1)(a) or on Article 9, (c) where the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of the

Regulation (EU) 2016/679 repealing Directive 95/46 / EC (a hereinafter referred to as the "General Data Protection Regulation") Article 15 (1) (a) and (c) to (d);

processing of personal data, on the free movement of such data and repealing Directive 95/ 46/EC (General Data Protection Regulation, OJ L 119 of May 4, 2016, p

found a violation of Article 12(3) in relation to Article 15 GDPR. The Garante hence applied an administrative fine as per Article 83(5) GDPR. The amount

processing had to be disclosed as part of the information (cf. Art. 12 Directive 95/46 / EC). In the judgment of May 7, 2009 already quoted, the ECJ stated

(2016/679) Article 5 (1) (a), Article 12 (1), (2) and (6) , Article 13, Article 15 (1) (h), (3) and (4), Article 58 (2) (c) and (d) subparagraphs Article 34 (1)

of Articles 12(3): The DPA held that the controller had breached Article 12(3) by failing to provide information pursuant to an Article 15 access request

the previous regime of Directive 95/46/EU. The DPA found that taking into account the interpretation of Article 12 Directive 95/46/EU by the CJEU, a on-the-spot

criteria provided for in paragraphs 2 and 3 of article 3 of this regulation.10. Paragraph 1 of Article 4 of Directive 95/46/EC provided that: "Each Member State

these operations are explicitly stated and unconditional in Article 2 (b) of Directive 95/46, must be classified as treatment within the meaning of said

such data and repealing directive 95/46/EC (general data protection regulation), hereinafter AVG; Having regard to the law of 3 December 2017 establishing

personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).Privacy Protection Authority

accordance with Article 5 (1) of the Regulation. And Article 24 (2). The list must be drawn up in order to demonstrate compliance with the Regulation [3] and must

of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General data protection regulation). [2] Case C-673/17, Bundesverband

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC, "General Data Protection Regulation" (hereinafter "RGPD"); GIVEN

matter "Fashion ID" that on the legitimate interest of article 7, letter f) of the directive 95/46, establishes three cumulative requirements for a data

that the controller had violated Article 5(1)(a) GDPR, Article 12 GDPR, Article 13 GDPR, Article 15 GDPR and Article 25(1) GDPR. As a result, the DPA issued

which regulates the processing, pursuant to the requirements of Article 6(3) GDPR. Article 10 of Act No. 2023-380 provides that for the processing to be

15 GDPR can be used. Paragraph 46 In the decision of the ECJ on Art. 12 of Directive 95/46/EC (Data Protection Directive) (judgment of July 17, 2014, related

connection with Article 5 paragraph 1 point a, Article 5 paragraph 2, Article 6 paragraph 1, Article 7 paragraph 3, Article 12 paragraph 2, Article 17 paragraph

personal data. (Recital 7). Finally, the European legislator regrets that Directive 95/46/EC has not avoided the widespread public perception that significant

principles of Directive 95/46 / EC are maintained. Also comes the content of the definitions of 'controller',as included in Article 2 (d) of Directive 95/46 / EC

movement of such data and repealing Directive 95/46 / EC (General data protection regulation). [2] See also Article 29 Working Party Guidelines on Consent

Facebook page is responsible processor within the meaning of Article 2 point d of Directive 95/46. d) It is clearly stated in IKÜM that a statement from the

personal data and the free circulation of these data and repealing Directive 95/46 / CE (hereinafter, “General Regulation of data protection "or" RGPD

the notion of legitimate interests of the data controller under Article 7 of Directive 95/46 / EC, pages 24 and 25. 4The Privacy Board has elaborated on the

protection regulation's article 5, subsection 2, cf. Article 5, subsection 1, letter a, Article 24, cf. Article 28, subsection 1, Article 35, subsection 1, as

the treatment is based on consent in accordance with Directive 95/46 / EC, it is not necessary 3 Page 4 JURISPRUDENCE that the interested party give his

of the proceedings. 3.2. [applicant sub 1] et al bases the removal requests on Article 17 paragraph 1, under a, c and d, and Article 21 paragraph 1 of the

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC, "General Data Protection Regulation" (hereinafter the Regulation);

compliance of the provision in Article 25h, paragraph 2 of the LPPD with Article 10 ECHR, Article 19 of the UDHR and Article 19 of the ICCPR . Considers,

contrary, Directive 95/46/EC regulated the matter. However, the legal reasoning developed by the court substantially follows the structure of Article 17 GDPR

executed. Legal basis: Article 4 lines 1, 2 and 5, Article 11 paragraphs 1 and 2, Article 12 paragraph 2, Article 17 paragraph 1 and Article 58 paragraph 2 lit

freely given in accordance with Article 4(11) GDPR and fulfilled the condition for withdrawal of consent set out in Article 7(3) GDPR. The Finnish DPA received

not constitute a complaint under Article 77 GDPR, but a "submission" within the meaning of Article 28(4) of Directive 95/46/EC. In the present case the data

of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter referred to as the General Data Protection Regulation

of personal data and on the free movement of such data and repealing Directive 95/46/EC, "General Data Protection Regulation" (hereinafter referred to as

repealing Directive 95/46 / EC, which is, in accordance with its article 99 (2), “applicable from 25 May 2018”. It also follows from Article 96 GDPR that

of personal data and on the free movement of such data and repealing Directive 95/46/EC, "General Data Protection Regulation" (hereinafter RGPD); HAVING

Question 4: Are Articles 2(f) and 5(3) of Directive 2002/58EC, read in conjunction with Article 4(11), Article 95 and Recital 4 of Regulation (EU) 2016/679

such media are used solely for transit purposes." This article transposes article 4 of Directive 95/46/EC, which literally states: “Applicable national law

processed on the basis of consent. 3. Justification for the Danish Data Protection Agency's decision 3.1. It follows from Article 14 (1) of the Data Protection

defendant is Article 159(2)(4) of the Polish Telecommunications Law, in conjunction with Article 30, Article 32(2), Article 42(1) and Article 45(1) of the

in the need for a confirmation of acceptance and identification (points 3.3 and 3.5.2 of the General Terms and Conditions for letters nationally and point

data, as well as the free circulation of such data and which repeals Directive 95/46 / EC (hereinafter the "Regulations"); GIVEN the legislative decree 30

pursuant to Article 58, paragraph 2, of the Regulation, with this measure. Pursuant to Article 78 of the Regulation, Article 152 of the Code and Article 10 of

charge follows from Article 15 para. 3 sentence 1 in conjunction with Article 15 para. 3 sentence 2 in conjunction with Article 15 para. 3 sentence 2 in conjunction

processed in accordance with Article 32 (2) of the Regulation. 2nd 3.3. Article 33 (1) of the Data Protection Regulation 1 and Article 34 (1). 1 The Data Inspectorate

personal data and on the free movement of such data and on the repeal of Directive 95/46 / EC (General Data Protection Regulation). 2The Act (2018: 218) with

by the data controller data within the meaning of article 7 of directive 95/46/EC, p. 21. 8 “Article 29” Working Party, Opinion 06/2014 on the notion of

such data and repealing Directive 95/46 / EC, which is to be applied directly, c) the first paragraph of Article 6 replaces Article 8 of ZVOP-1. The provision

Preamble to the AVG that the objectives and principles of Directive 95/46/EC remain valid, (...). Article 12 of the AVG, on the transparent information, communication

applies regardless of any signage pursuant to sections 3 and 3 a of the Act. to the requirements of Article 14 of the Data Protection Regulation. Based on the

data, on the free movement of data and on the repeal of Directive 95/46/EC ( Data protectionArticle 15, paragraph one, letter c of Regulation (EU) 2016/679

free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation): (1) Is Article 83(4) to (6) of the GDPR to be interpreted

(1)-(3), Article 83 (5)(e) in connection with Article 31, Article 58 (1)(e), Article 58 (2)(i) of Regulation EU 2016/679 of the European Parliament and

other legal basis for processing under Article 6 GDPR, the controller had violated Article 5(1)(a) and Article 6(1) GDPR. Taking into account the low income

such data and repealing Directive 95/46 / EC, which is to be applied directly, c) the first paragraph of Article 6 replaces Article 8 of ZVOP-1. The provision

Regulation (GDPR). (2) The EDPB succeeds the Article 29 Working party set up under Article 29 of Directive 95/46/EC. It is composed of the Member States data

damages by the plaintiff pursuant to Article 82(1) GDPR, since there have been violations of Article 6(1)(a) GDPR and Article 34 GDPR. The defendant also breached

and the protection of such data and repealing Directive 95/46 / EC the right of rectification under Article 16 of the Regulation (hereinafter referred to

connection with Article 31, Article 58(1)(e) in connection with Article 83(1-3) and Article 83(5)(e) of Regulation 2016/679 of the European Parliament and of

personal data, as well as the free movement of such data and repealing Directive 95/46/ CE, “General Data Protection Regulation” (hereinafter, “Regulation”);

meaning of the term “filing system” in Article 2(1) GDPR. In doing so it took Recitals 15 and 27 of the 95/46 directive into account as well as the CJEU decision

cross-border data processing [...]. The Court of Justice’s case-law on Directive 95/46/EC and Article 100a TEC to date has not adopted such a narrow understanding

which was issued in compliance with Directive 95/46/EC, is understood as a reference to the GDPR (see also article 94 par. 1 GDPR) . Therefore, for every

implementation in national law of the provisions then in force of Article 24 of Directive 95/46/EC of 24 October 1995, which left it up to the Member States

complainant's request for access in accordance with Article 12 (2) of the Data Protection Regulation. 3, cf. Article 15. 3. TDC A / S 'processing of position data

24 sec. 1, art. 25 sec. 1, art. 28 sec. 1 and 3 and article. 32 sec. 1 and 2, as well as art. 83 sec. 1 - 3, art. 83 sec. 4 lit. a) and art. 83 sec. 5 lit

free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), are: Article 2 Material scope of application 1. This

expressed in Article 5 (1 ) (a)) f, and reflected in the obligations set out in Article 24 (1), Article 25 (1), Article 32 (1 ) (b ) and (d) and Article 32 (2)

the obligations resulting from article 82 of this law, transposing the objectives of paragraph 3 of Article 5 of Directive 2002/58/EC. 9. The applicant companies

1781) in connection with Article 31, Article 58(1)(a) in connection with Article 83(1)-(3) and Article 83(5)(e) of Regulation EU 2016/679 of the European

personal data and the free circulation of these data and repealing Directive 95/46 / EC (General Regulation for the protection of data)." Along with the

right: Article 39(3) as well as Article 37(2) and 39(1) of the LERGPD 18. The Defendant disputes that the CNPD can dismiss the application of article 39.

breached Article 28(3) GDPR where it had tried to retroactively amend one of its data processor agreements to include all requirements of this Article. The

movement of such data, and repeating Directive 95/46/EC (General Data Protection Regulation) as follows: Article 80 Representation of data subjects 1.

elements according to Article 83 GDPR, the DPA imposed a fine in the amount of €18,000 for a violation of Article 5, 9, 32 GPDR and Article 157 of the Italian

previous EU law data protection regime that applied under Directive 95/46/EC ("Data Protection Directive") 1 . The GDPR seeks to harmonise the protection of

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter AVG; Having regard to the Act of 3 December 2017 establishing

authority. The court stated that Article 82 of the Law Informatique et Libertés was a transposition of article 5(3) of the Directive 2002/58/CE into French Law

Fashion ID, 6 in which the CJEU explains Article 7 (f) of Directive 95/46, 7that is substantively equal to Article 6, first paragraph, opening lines and under

data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter “GDPR”; 14See article 100 WOG. 15See section 6.3.2. and articles 94-97

LOPD. This resolution warns about the provisions of article 95.3 of the On the other part, article 95.3 of Law 39/2015, of October 1, on Administrative Procedure

Litigation Chamber st 2 pursuant to Article 62, § 1 of the LCA. 4. Pursuant to article 95 § 2, 3° of the LCA as well as article 47 of the rules of order inside

such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter AVG; Having regard to the Act of 3 December 2017 establishing

controller within the meaning of Article 7 of Directive 95/46 / EC ", adopted on April 9, 2014, p. 20. 13 Audit report of April 3, 2019 p. 5. Beslissing on the

repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter “GDPR”; 14See also article 100 of the LCA. 15See section 6.3.2. and sections