Guideline and Action Points for Hospital Consultants by IHCA

Health Data, Sensitive Data

Становище от 15.05.2012 г. на КЗЛД по искане No ЗАП- 18/23.04.2012

Health Data, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Vinted (7/2/2024)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Cypriot Data Protection Commissioner-Aylo Social LTD (2/8/2024)

Access Requests (DSAR), Data Subjects Rights

Cypriot Data Protection Commissioner-Brivio Limited (2/8/2024)

Data Subjects Rights

Bulgarian Commission for Personal Data Protection (KZLD)-Unknown (2/9/2023)

Lawfulness of Processing, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Verkkokauppa.com (3/6/2024)

Data Subjects Rights, Principles, Storage limitation

Cypriot Data Protection Commissioner-Physician (12/7/2023)

Lawfulness of Processing

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/15/1905)

Accuracy, Principles

Icelandic data protection authority (‘Persónuvernd’)-Stjörnuna ehf (3/24/2024)

Lawfulness of Processing, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Company (1/24/2023)

Data Subjects Rights, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Garðabær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Hafnarfjörður (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Cypriot Data Protection Commissioner-Open University of Cyprus (11/22/2023)

Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Kópavogur (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Reykjanesbær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavik (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Cypriot Data Protection Commissioner-Cypriot Ministry of the Interior (7/15/1905)

Lawfulness of Processing, Sensitive Data

Cypriot Data Protection Commissioner-Breikot Management Ltd (7/15/1905)

Controllers and Processors, Data minimisation, Principles, Representative

Deputy Data Protection Ombudsman-Company (9/4/2023)

Data Subjects Rights

Icelandic data protection authority (‘Persónuvernd’)-University of Iceland (9/6/2023)

Data Subjects Rights, Lawfulness of Processing

Deputy Data Protection Ombudsman-Suomen Yritysrekisteri (9/11/2023)

Data Subjects Rights

Lithuanian Data Protection Authority (VDAI)-Company (4/20/2023)

Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Almennri innheimtu ehf (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-eCommerce 2020 ApS (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Creditinfo Lánstraust hf. (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Sjúkratyringur Íslands (6/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Heilsuveru (7/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Bulgarian Commission for Personal Data Protection (KZLD)-Political party (7/14/1905)

Consent, Lawfulness of Processing

Bulgarian Commission for Personal Data Protection (KZLD)-Bulgarian Post EAD (5/4/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Bulgarian Commission for Personal Data Protection (KZLD)-Trucking company (7/14/1905)

Lawfulness of Processing

Cypriot Data Protection Commissioner-Πολίτης newspaper (1/16/2023)

Controllers and Processors, Data minimisation, Principles, Representative

Cypriot Data Protection Commissioner-Epic Ltd. (2/3/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-NAGA Markets Europe Ltd (5/2/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

National Commission for Data Protection (CNPD)-Company (10/27/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Company (12/13/2022)

Data Subjects Rights

National Commission for Data Protection (CNPD)-Company (12/13/2022)

Data Subjects Rights

National Commission for Data Protection (CNPD)-Company (12/13/2022)

Data Subjects Rights

National Commission for Data Protection (CNPD)-Company (12/13/2022)

Data Subjects Rights

National Commission for Data Protection (CNPD)-Company (12/13/2022)

Data Subjects Rights

Deputy Data Protection Ombudsman-Suomen Asiakastieto Oy (2/17/2023)

Administratives Measures, Liability and Remedies

National Commission for Data Protection (CNPD)-Manager of a real estate co-ownership (12/13/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

National Commission for Data Protection (CNPD)-Company (7/22/2022)

Data minimisation, Data Subjects Rights, Principles

Cypriot Data Protection Commissioner-PRINTAFORM Ltd. (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cyprus Electricity Authority (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cypriot Ministry of Defense (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-DW Dynamic Works LIMITED (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Hermes Airport Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-DW Dynamic Works LIMITED (7/14/1905)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Universal Life Insurance Public Co Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Company (12/27/2022)

Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Praktiškas UAB (1/9/2023)

Lawfulness of Processing, Sensitive Data

Deputy Data Protection Ombudsman-Alektum Oy (12/13/2022)

Data Subjects Rights

Deputy Data Protection Ombudsman-Viking Line Oy Abp (12/9/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-HEI – Medical Travel (5/3/2022)

Access Requests (DSAR), Data Subjects Rights

National Commission for Data Protection (CNPD)-Company (6/22/2022)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Company (6/30/2022)

Data Subjects Rights, Principles, Storage limitation

National Commission for Data Protection (CNPD)-Company (6/30/2022)

Data Subjects Rights, Lawfulness of Processing

National Commission for Data Protection (CNPD)-Company (6/30/2022)

Data Subjects Rights, Lawfulness of Processing

Cypriot Data Protection Commissioner-Oroklini Municipal Council (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Εκδοτικού Οίκου Δίας (2/4/2022)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Physician (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Cypriot Data Protection Commissioner-Cyprus Judo Federation (7/14/1905)

Controllers and Processors, Cooperation with Supervisory Authorithy

Deputy Data Protection Ombudsman-Otavamedia Oy (5/9/2022)

Data minimisation

Deputy Data Protection Ombudsman-Telemarketing company (4/29/2022)

Administratives Measures, Liability and Remedies

National Commission for Data Protection (CNPD)-Café owner (2/2/2022)

Data minimisation, Data Subjects Rights, Principles

Cypriot Data Protection Commissioner-Mediterranean Hospital of Cyprus (9/17/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavík (5/3/2022)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-English School Cyprus (3/22/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-English School staff union (ESSA) (3/21/2022)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Medical clinic (12/26/2021)

Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Hörpu tónlistar- og ráðstefnuhúss ohf. (3/8/2022)

Controllers and Processors, Data minimisation, Principles, Representative

National Commission for Data Protection (CNPD)-Unknown (12/1/2021)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (11/9/2021)

Data minimisation, Data Subjects Rights, Principles

Deputy Data Protection Ombudsman-Travel agency (12/16/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Motor insurance center (12/16/2021)

Lawfulness of Processing, Sensitive Data

Deputy Data Protection Ombudsman-Psykoterapiakeskus Vastaamo (12/7/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Lithuanian Data Protection Authority (VDAI)-UAB Prime Leasing (11/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Cypriot Data Protection Commissioner-WS WiSpear Systems Ltd (11/12/2021)

Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (10/27/2021)

Data Protection Officer (DPO)

National Commission for Data Protection (CNPD)-Unknown (10/6/2021)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Insurance company (8/5/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-APOEL FC (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-AC Omonia (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Hellenic Technical Enterprises Ltd. (9/6/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Higher Education Institution (7/5/2021)

Data minimisation, Principles, Representative

National Commission for Data Protection (CNPD)-Amazon Europe Core S.à.r.l. (7/16/2021)

National Commission for Data Protection (CNPD)-Unknown (4/8/2021)

Data Subjects Rights, Principles, Storage limitation

Deputy Data Protection Ombudsman-Magazine publisher (6/24/2021)

Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Data Protection Officer (DPO)

National Commission for Data Protection (CNPD)-Unknown (6/29/2021)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (5/31/2021)

Data Protection Officer (DPO)

Lithuanian Data Protection Authority (VDAI)-UAB VS FITNESS (6/21/2021)

Lawfulness of Processing, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Unknown (7/12/1905)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Huppuís ehf (6/15/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

National Commission for Data Protection (CNPD)-Unknown (5/12/2021)

Data minimisation, Principles, Sensitive Data

National Commission for Data Protection (CNPD)-Unknown (5/12/2021)

Data minimisation, Principles

National Commission for Data Protection (CNPD)-Unknown (5/12/2021)

Data minimisation, Data Subjects Rights, Principles

National Commission for Data Protection (CNPD)-Unknown (5/12/2021)

Data minimisation, Data Subjects Rights, Principles

Deputy Data Protection Ombudsman-ParkkiPate Oy (4/21/2021)

Data minimisation

Icelandic data protection authority (‘Persónuvernd’)-InfoMentor ehf (4/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Electricity Authority of Cyprus (3/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Nacionaliniam visuomenės sveikatos centrui (NVSC) (2/26/2021)

Controllers and Processors, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-IT sprendimai sėkmei (2/26/2021)

Controllers and Processors, Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Registrų Centras (3/2/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Hellenic Bank (3/3/2021)

Controllers and Processors, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cypriot Real Estate Registration Authority (3/3/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Subjects Rights, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-KEPIDES (3/3/2021)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Grant Ideas Ltd (10/19/2020)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Lithuanian Data Protection Authority (VDAI)-Vilnius City Municipality Administration (10/21/2020)

Accuracy, Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Cyprus Police (10/22/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Acc Consulting Varsinais-Suomi (8/5/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Unknown Company (5/22/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Taksi Helsinki (5/29/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Political Party (4/14/2020)

Lawfulness of Processing

Data Protection Commision of Bulgaria (KZLD)-T.K. EOOD (2/20/2020)

Data Subjects Rights, Principles, Privacy by Design

Data Protection Commision of Bulgaria (KZLD)-L.E. EOOD (2/20/2020)

Data Subjects Rights, Lawfulness of Processing, Principles, Privacy by Design

Data Protection Commision of Bulgaria (KZLD)-Utility Company (1/6/2020)

Consent, Lawfulness of Processing

Deputy Data Protection Ombudsman-Posti Group Oyj (5/22/2020)

Access Requests (DSAR), Data Subjects Rights

Deputy Data Protection Ombudsman-Kymen Vesi Oy (5/22/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA)

Icelandic data protection authority (‘Persónuvernd’)-National Center of Addiction Medicine (‘SAA’) (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-Breiðholt Upper Secondary School (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-eShop for Sports (M.L. PRO.FIT SOLUTIONS LTD) (1/13/2020)

Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Commercial representative of telecommunication service provider (9/3/2019)

Consent, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Private enforcement agent (9/3/2019)

Data Subjects Rights

Commission for Personal Data Protection (KZLD)-Employer (10/28/2019)

Data Subjects Rights

Commission for Personal Data Protection (KZLD)-B.D. (10/7/2019)

Controllers and Processors, Cooperation with Supervisory Authorithy

Commission for Personal Data Protection (KZLD)-The Ministry of Interior Affairs (10/8/2019)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance (1/13/2020)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Cypriot Data Protection Commissioner-Doctor (7/11/1905)

Controllers and Processors, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (8/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-DSK Bank (8/28/2019)

Controllers and Processors, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-Medical centers (4/8/2019)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Commision of Bulgaria (KZLD)-A.P. EOOD (3/26/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Lithuanian Data Protection Authority (VDAI)-Payment service provider UAB MisterTango (5/16/2019)

Controllers and Processors, Data Breaches, Data Subjects Rights, Principles

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Telecommunication service provider (2/26/2019)

Lawfulness of Processing, Principles

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (1/17/2019)

Lawfulness of Processing, Principles

Bulgarian Commission for Personal Data Protection (KZLD)-Employer (2/22/2019)

Access Requests (DSAR), Data Subjects Rights

Cypriot Data Protection Commissioner-State Hospital (7/11/1905)

Access Requests (DSAR), Data Subjects Rights

Cypriot Data Protection Commissioner-Newspaper (7/11/1905)

Lawfulness of Processing