Resources

Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

UK ICO – consultation series on generative AI

Adoption of AI, Blockchain and other emerging technologies within the European public sector A Public Sector Tech Watch report by EU Commission

AI, Public Interests

Draft Methodology for Human Rights, Democracy and the Rule of Law Impact Assessment for AI Systems by Council of Europe

AI, Data Protection Impact Assessment (DPIA)

A BLUEPRINT FOR GREECE’S AI TRANSFORMATION

AI, Public Interests

Lawsuit Canadian news vs OpenAI

AI, Copyright

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

Proof of concept Blockchain and the right to erasure by AEPD

Right to Erasure

OH Digitale Dienste version 1.2 by German data protection authority

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

First Draft General-Purpose AI Code of Practice by EU Commission

Musk Adds Microsoft to OpenAI Lawsuit, Expanding Antitrust Allegations

Meta’s New Ad Model in the EU: Consent or Contextual Ads?

Consent, Data Subjects Rights

AI tools in recruitment by UK ICO

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI Management Essentials by Department for Science, Innovation and Technology

UK to Regulate AI Frontier Models with New Legislation in 2025

AI and the audiovisual sector: navigating the current legal landscape by IRIS European Audiovisual Observatory

Harmonised Standards for the European AI Act by EU Commission

AI Principles and Best Practices for Developers and Employers by U.S. DEPARTMENT OF LABOR

Perplexity AI Faces Lawsuit Over Alleged Copyright Violations by Dow Jones and NY Post

AI Toolkit Tracker

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Artificial Intelligence (AI) Toolkit Tracker – more information about the Toolkit by UK ICO

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

RTL Belgium Ordered to Add “Refuse All” Button to Cookie Banner by Belgian DPA

Consent

Polish National Personal Data Protection Office (UODO)-National Prosecutor’s Office (9/2/2024)

Consent, Controllers and Processors, Data Breaches, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Private individual (7/18/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ASSOCIACIO OASIS CULTURAL (4/26/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-WWPD CINVENTO INTERNATIONAL PATENT TRADING, S.L. (7/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Website operator (6/5/2024)

Principles, Storage limitation

Spanish Data Protection Authority (aepd)-NATURGY IBERIA, S.A. (6/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Club Balonmano Gijón (6/17/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-ARRENDAMIENTOS DEUDORES, S.L. (5/7/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azzurro Club Hotels S.r.l. (5/9/2024)

Access Requests (DSAR), Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/15/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Innova Camara (4/11/2024)

Principles, Sensitive Data, Storage limitation

Austrian Data Protection Authority (dsb)-Website operator (1/4/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies, Right to Erasure

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Italian Data Protection Authority (Garante)-Mas s.r.l. (4/13/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mas s.r.l.s. (4/13/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/1/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/29/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A (4/12/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Brandenburg-Supermarket (7/15/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/8/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (2/13/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE S.A.U. (1/23/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/23/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Verkkokauppa.com (3/6/2024)

Data Subjects Rights, Principles, Storage limitation

Spanish Data Protection Authority (aepd)-VUKMAL TRADE, S.L. (1/24/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/15/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/17/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/31/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Municipality (11/7/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/28/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (11/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (11/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (11/22/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Scionti Selezioni Superiori S.r.l. (10/12/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Compara Facile S.r.l. (7/18/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (11/15/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (11/16/2023)

Consent, Lawfulness of Processing

Hellenic Data Protection Authority (HDPA)-Athens Urban Transport Organization (9/25/2023)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Storage limitation

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Spark Car Sharing SRL (10/25/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (11/6/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/11/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Schockholm School borard (10/3/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

French Data Protection Authority (CNIL)-GROUPE CANAL + (10/12/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (9/26/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Hotel (9/26/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (9/7/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-JOLY DIGITAL, S.L.U. (8/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/16/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/28/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/31/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (7/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NANDIVALE, S.L (7/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L. (7/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/26/2023)

Consent, Lawfulness of Processing

Lithuanian Data Protection Authority (VDAI)-Company (4/20/2023)

Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ODAFONE SERVICIOS, S.L.U. (7/3/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-KUGELCHEN PROPIERTIES, S.L. (7/7/2023)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Almennri innheimtu ehf (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-eCommerce 2020 ApS (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Creditinfo Lánstraust hf. (6/27/2023)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Sweden-Bonnier News AB (6/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (6/21/2023)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-CRITEO (6/15/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES (6/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/6/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-FUSIONA SOLUCIONES ENERGÉTICAS, S.A. (5/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/9/2023)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Compania Națională Poșta Română S.A. (5/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Global Baby Brand SRL (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/24/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Sports betting operator (5/18/2023)

Consent, Lawfulness of Processing, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (6/6/2023)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-I&S Limited Kft (2/6/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Credit institution (7/14/1905)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-ESTUDIO INMOBILIARIO SAN ISIDRO, S.L.U. (5/9/2023)

Consent, Lawfulness of Processing

Bulgarian Commission for Personal Data Protection (KZLD)-Political party (7/14/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Aesse S.r.l.s. (3/9/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-FUNDACIÓ PRIVADA UNIVERSITARIA EADA (5/5/2023)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Coin dealer (9/12/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Epic Ltd. (2/3/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Hotel (12/21/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Storage limitation

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (4/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, S.A.U. (4/24/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (3/10/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (4/4/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-TV2 Média Csoport Zrt. (9/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-CITIZENGO FOUNDATION (2/28/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ENFOKA SISTEMAS GLOBALES, S.L. (4/4/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (3/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (3/21/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Edison Energia S.p.A. (12/15/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (2/21/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Telecommunications company (Unknown)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-News service (11/15/2022)

Consent, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Baden-Wuerttemberg-Debt collection company (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Sats ASA (2/6/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Dentist (1/31/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-FACTOR ENERGÍA, S.A. (1/2/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fondazione Teatro Regio di Torino (10/20/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CASAL DE L’ESPLUGA DE FRANCOLÍ (1/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (12/29/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/16/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Ireland-WhatsApp Ireland Ltd. (1/19/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-I-Model s.r.l. (11/10/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L. (1/12/2023)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Homeowners Association (1/3/2023)

Principles, Storage limitation

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HOSPITAL RECOLETAS PONFERRADA, S.L. (12/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (12/15/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/20/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/10/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-ÉLECTRICITÉ DE FRANCE (11/24/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CÍTRICOS TANTA, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Rapido Finance, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TECHPUMP SOLUTIONS S.L. (10/31/2022)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-XASTRE DO PETO, S.L. (11/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

French Data Protection Authority (CNIL)-DISCORD INC. (11/10/2022)

Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Portuguese Data Protection Authority (CNPD)-Setúbal municipality (11/2/2022)

Principles, Sensitive Data, Storage limitation

Spanish Data Protection Authority (aepd)-ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP (10/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (9/1/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SEAN SERIOS S.L. (10/14/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (10/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. (10/9/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-UNION DE OFICIALES DE LA GUARDIA CIVIL PROFESIONAL (10/9/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (10/3/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-IDIKA SA (8/8/2022)

Data Subjects Rights, Principles, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Surveyor (9/21/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Federazione Italiana Sommelier, Albergatori e Ristoratori (6/30/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Property development company (9/21/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MARIELI GABRIELA, S.L. (9/16/2022)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-GIE INFOGREFFE (9/13/2022)

Data Subjects Rights, Principles, Storage limitation

Data Protection Authority of Ireland-Meta Platforms, Inc. (9/5/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGITECNIA SOLUTIONS, S.L. (8/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ECOZONO Y CULTURA, S.L. (7/15/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/26/2022)

Consent, Lawfulness of Processing

Data Protection Authority of Niedersachsen-Hannoversche Volksbank (7/28/2022)

Consent, Lawfulness of Processing

National Commission for Data Protection (CNPD)-Company (6/30/2022)

Data Subjects Rights, Principles, Storage limitation

Spanish Data Protection Authority (aepd)-FLY FUT, S.L. (6/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Alquiler Seguro SA (5/24/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/6/2022)

Consent, Lawfulness of Processing

Danish Data Protection Authority (Datatilsynet)-Gyldendal A/S (6/22/2022)

Principles, Storage limitation

Italian Data Protection Authority (Garante)-Nos s.r.l.s. (4/28/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-SA Rossel & Cie (6/16/2022)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Company (3/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Spanish Data Protection Authority (aepd)-Private individual (5/12/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/17/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Physician (4/22/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Nationale Maatschappij der Belgische Spoorwegen (5/4/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-MISTORE CANARIAS, S.L. (5/3/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEDEROS MOVITEN, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Working Capital Management España, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-JIMBO NETWORKS, S.L. (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Website operator (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MOVALIA TRASLADOS, S.L.U. (4/23/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (2/4/2022)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Etterforsker1 Gruppen AS (2/1/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Amazon Road Transport Spain S.L. (2/11/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (2/16/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-IAB Europe (2/2/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Researcher (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Belgian Data Protection Authority (APD)-EU DisinfoLab (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Data Protection Authority of Brandenburg-Operator of a ballet school (7/12/1905)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Brandenburg-Medical assistant (7/12/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Lawyer (12/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Cyrana España General S.L. (1/31/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-EDUCANDO JUNTOS SL (1/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (1/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEETING PUERTO C.B. (1/17/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD (12/21/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO RITMO DE ANDALUCÍA (12/17/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Sfam España General s.l. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HUBSIDE IBÉRICA S.L. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-REAL CLUB NÁUTICO DE RIBADEO (12/28/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (12/7/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Norwegian State Pension Fund (SPK) (11/24/2021)

Consent, Data minimisation, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Grindr LLC (12/13/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Car importer (10/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE (11/30/2021)

Data Subjects Rights, Right to Erasure

Spanish Data Protection Authority (aepd)-ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE (11/30/2021)

Data Subjects Rights, Right to Erasure

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/23/2021)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-UNIÓN FINANCIERA ASTURIANA S.A. E.F.C. (11/24/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/19/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (10/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Ultra-Technology AS (9/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (10/8/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MAF.COM ESQUI CLUB (10/11/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Sky Italia S.r.l. (9/16/2021)

Consent, Lawfulness of Processing, Principles

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO SANSUEÑA, S.L. (10/5/2021)

Controllers and Processors, Principles, Representative, Storage limitation, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gas inspector (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/3/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-PRA Iberia S.L. (7/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Body Tonic Shop S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gerco Fit S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vasco Andaluza de Inversiones S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/2/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Unknown (7/1/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/1/2021)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-SGAM AG2R LA MONDIALE (7/20/2021)

Data Subjects Rights, Principles, Storage limitation

Spanish Data Protection Authority (aepd)-UNIVERSIDAD A DISTANCIA DE MADRID, S.A. (7/29/2021)

Data Subjects Rights, Right to Erasure

National Commission for Data Protection (CNPD)-Unknown (4/8/2021)

Data Subjects Rights, Principles, Storage limitation

Italian Data Protection Authority (Garante)-Iren Mercato S.p.A. (5/13/2021)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Huppuís ehf (6/15/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

French Data Protection Authority (CNIL)-BRICO PRIVÉ (6/14/2021)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Storage limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Master Distancia S.A. (6/7/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (5/14/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Highcliffe Estates Marbella S.L. (4/20/2021)

Consent, Lawfulness of Processing

Czech Data Protection Auhtority (UOOU)-Public university (7/12/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Pagamastarde S.L. (4/27/2021)

Data Subjects Rights, Right to Erasure

Czech Data Protection Auhtority (UOOU)-Ski rental company (7/12/1905)

Consent, Controllers and Processors, Data minimisation, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Cultural association (3/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/16/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fastweb S.p.A. (3/25/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Cypriot Data Protection Commissioner-Electricity Authority of Cyprus (3/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Filigrana Comunicación S.L.U. (3/10/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (3/12/2021)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) (12/10/2020)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-Hellenic Bank (3/3/2021)

Controllers and Processors, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Data State Inspectorate (DSI)-Lursoft IT SIA (2/9/2021)

Consent, Lawfulness of Processing

Data Protection Authority of Ireland-University College Dublin (12/17/2020)

Controllers and Processors, Data Breaches, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Unknown (1/12/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (1/21/2021)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Family Service / N.D.P.K. nv. (1/27/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (1/4/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Online Services (12/15/2020)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Servicio de Alojamientos Responsables, S.L. (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA) (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (12/9/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Borjamotor, S.A. (12/10/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Iweb Internet Learning, S.L. (9/22/2020)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/12/2020)

Consent, Lawfulness of Processing, Principles

Italian Data Protection Authority (Garante)-Cavauto S.R.L. (8/10/2020)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Arp Hansen Hotel Group A/S (7/28/2020)

Principles, Storage limitation

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Utility Company (1/6/2020)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Commercial representative of telecommunication service provider (9/3/2019)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/11/1905)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Town of Kerepes (10/1/2019)

Consent, Lawfulness of Processing

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-PWC Business Solutions (7/30/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Medical centers (4/8/2019)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Danish Data Protection Authority (Datatilsynet)-Taxa 4×35 (7/11/1905)

Principles, Storage limitation

Danish Data Protection Authority (Datatilsynet)-IDdesign A / S (2/12/2021)

Controllers and Processors, Principles, Representative, Storage limitation

French Data Protection Authority (CNIL)-SERGIC (Real Estate) (5/28/2019)

Principles, Storage limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Austrian Data Protection Authority (dsb)-Private person (12/20/2018)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

“The Landscape of Consent Management Tools – A Data Altruism Perspective” by EU Commission

Consent, Lawfulness of Processing

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg discussion paper on “Legal Foundations in Data Protection for the Use of AI”

AI, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Japan AI Safety Institute’s “Guide to Red Teaming Methodology on AI Safety”

AI, Specific processing situations

Study Finds ChatGPT Can Perform Biometric Tasks: A Closer Look at Privacy Risks

AI, Sensitive Data

Recommendations for the use of AI coding assistants by ANSSI and BSI

AI, Specific processing situations

AIPact by the European Artificial Intelligence Office

AI, Data Subjects Rights, Specific processing situations

Manipulative, Deceptive, and Exploitative AI Systems report by the Dutch DPA

AI, Lawfulness of Processing, Specific processing situations

FTC Targets Deceptive AI Claims with Operation AI Comply

AI, Lawfulness of Processing

OpenAI, Microsoft, and Amazon Join EU’s AI Pact to Shape Future Regulations

California Governor Vetoes AI Safety Bill

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

National Strategy on AI by Sri Lanka

AI, Lawfulness of Processing, Specific processing situations

The Future of European Competitiveness by EU Commission

AI, New technology, Specific processing situations

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Tech Giants Sign Open Letter Urging “Regulatory Certainty on AI” in Europe

LinkedIn Used User Data for AI Training Before Updating Its Terms

AI, Data Sharing, Data Subjects Rights, Lawfulness of Processing

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Artificial Intelligence and Machine Learning in Health Care and Medical Sciences Best Practices by Pitfalls Gyorgy J. Simon Constantin Aliferis Springer

AI, Health Data, Principles, Sensitive Data, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce by EDPB

AI, Specific processing situations

Recommendations 02/2021 on the legal basis for the storage of credit card data for the sole purpose of facilitating further online transactions |EPDB

Consent, Lawfulness of Processing

Rethinking Privacy in the AI Era | White Paper by Stanford University

AI, Specific processing situations

A pro-innovation approach to AI regulation by UK ICO

AI, Specific processing situations

PRESS RELEASE No 20/24 | Case C-118-22

Data Subjects Rights, Right to Erasure

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Datenschutzkonforme Künstliche Intelligenz Checkliste mit Prüfkriterien nach DS-GVO

AI, Specific processing situations

Analysis of the final compromise text of the EU AI Act with a view to agreement by the Belgian Presidency

AI, Specific processing situations

[PROPOSAL 2024] EU AI ACT

AI, Specific processing situations

Generative AI framework for HM Government by the UK Central Digital and Data Office

AI, Specific processing situations

Artificial Intelligence Strategy of the CJEU

AI, Specific processing situations

Interim Report – Governing AI for Humanity by UN AI Advisory Body

AI, Specific processing situations

AI fairness in practice by the Alan Turing Institute

AI, Specific processing situations

Case T-1077/23

AI, Copyright, Specific processing situations

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

[DRAFT] FRAMEWORK CONVENTION ON ARTIFICIAL INTELLIGENCE, HUMAN RIGHTS, DEMOCRACY AND THE RULE OF LAW

AI, Specific processing situations

The NYT vs OpenAI and Microsoft

AI, Copyright, Specific processing situations

European Commision press release on AI Act Agreement

AI, Specific processing situations

New rules for Artificial Intelligence – Questions and Answers by the European Commision

AI, Specific processing situations

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL LAYING DOWN HARMONISED RULES ON ARTIFICIAL INTELLIGENCE (ARTIFICIAL INTELLIGENCE ACT)

AI, Specific processing situations

AI Act Provisional Agreement Press Release

AI, Specific processing situations

PRACTICAL GUIDANCE FOR THE USE OF GENERATIVE ARTIFICIAL INTELLIGENCE IN THE PRACTICE OF LAW by State Bar of California

AI, Specific processing situations

Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence (PROPOSED MEMORANDUM )

AI, Specific processing situations

The impact of the General Data Protection Regulation (GDPR) on artificial intelligence by the EU Parliamnet

AI, Specific processing situations

Guidelines for secure AI system development by UK NCSC and US CISA

AI, Specific processing situations

Benefits and Risks of Generative Artificial Intelligence Report by the State of California

AI, Specific processing situations

Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive by EDPB

Consent, Lawfulness of Processing

COMMON GUIDEPOSTS TO PROMOTE INTEROPERABILITY IN AI RISK MANAGEMENT | German Ministry of labor and social Affairs

AI, Specific processing situations

Generative AI: The Data Protection Implications by CEDPO

AI, Specific processing situations

Global Toolkit on AI and the Rule of Law for the Judiciary by UNESCO

AI, Specific processing situations

AI Privacy Policy template

AI, Specific processing situations

AI and Data Protection Risk Toolkit by UK ICO

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence by the US President

AI, Specific processing situations

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

AI How-to Sheets by CNIL

AI, Specific processing situations

Description of the dataset template by CNIL

AI, Specific processing situations

Opinion 44/2023 on the Proposal for Artificial Intelligence Act in the light of legislative developments

AI, Specific processing situations

Artificial intelligence and the Information Privacy Principles by the Privacy Commisioner (New Zealand)

AI, Specific processing situations

How to use AI and personal data

AI, Specific processing situations

C-460/20

Data Subjects Rights, Right to Erasure, Search Engines, Specific processing situations

One-Stop-Shop thematic case digest: RIGHT TO OBJECTAND RIGHT TO ERASURE

Data Subjects Rights, Right to Erasure, Right to Object

C-61/19

Consent, Lawfulness of Processing

C-507/17

Data Subjects Rights, Right to Erasure, Territorial Scope

C-136/17

Data Subjects Rights, Principles, Right to Erasure, Search Engines, Sensitive Data, Specific processing situations

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

C-102/20

Consent, Lawfulness of Processing

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

Recommendation 4: Seek parental consent for children under 15 by CNIL

Children as data subjects, Consent, Data Subjects Rights, Lawfulness of Processing

Voluntary AI Safety Standard by the Australian Government

AI, Specific processing situations

Safe and responsible AI in Australia Proposals paper for introducing mandatory guardrails for AI in high-risk settings by Australian Government

AI, Specific processing situations

Global Approaches to Auditing Artificial Intelligence by IPIE

AI, Specific processing situations

Artificial Intelligence Security Governance Framework 1.0 by China Cybersecurity Standardization Technical Committee

AI, Specific processing situations

Multidisciplinary Perspectives on Artificial Intelligence and the Law by Springer

AI, Specific processing situations

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Saudi Data & Artificial Intelligence Authority: Rules governing the appointment of Personal DPOs under the Kingdom of Saudi Arabia’s (KSA) Personal Data Protection Law (PDPL)

AI, Specific processing situations

NSW report: Artificial intelligence in New South Wales

AI, Specific processing situations

Briefing EU Legislation in Progress by EPRS on AI Act

AI, Specific processing situations

Decision by the Federal Administrative Court Austria W137 2252081-1/6E (german)

Consent, Lawfulness of Processing

ON THE ANTITRUST IMPLICATIONS OF EMBEDDING GENERATIVE AI IN CORE PLATFORM SERVICES BY SSRN

AI, Specific processing situations

South Africa National Artificial Intelligence Policy Framework

AI, Specific processing situations

Policy for the responsible use of AI in government by Australian Government

AI, Data Processing by the Government, Specific processing situations

Consumer Protection in respect of Use of Generative Artificial Intelligence by Hong Kong Monetary Authority

AI, Specific processing situations

The State of Artificial Intelligence in the Pacific Islands

AI, Specific processing situations

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Securing Artificial Intelligence: Mitigation Strategy Report by ETSI

AI, Specific processing situations

Data protection compliant AI by Bavarian State Office for Data protection Supervision

AI, Specific processing situations

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Responsible AI Governance in Africa: Prospects for Outcomes Based Regulation by African Observatory on Responsible AI

AI, Specific processing situations

Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework by EDPB

AI, Specific processing situations

Confidential Computing and Privacy: Policy Implications of Trusted Execution Environments by Future of Privacy Forum

AI, Specific processing situations

Formal Opinion 512 on Generative Artificial Intelligence Tools by AMERICAN BAR ASSOCIATION

AI, Specific processing situations

Consent Banner Report Overview of EU and national guidelines on dark patterns by NOYB

Consent, Lawfulness of Processing

National framework for the assurance of artificial intelligence in government by the Australian, state and territory governments

AI, Specific processing situations

Relying on the legal basis of legitimate interest to develop an AI system by CNIL

AI, Specific processing situations

Generative AI Controls Framework Safe, Secure, and Compliant AI Adoption Approach Whitepaper by IBM

AI, Specific processing situations

Patent Landscape Report on Generative AI by WIPO

AI, Specific processing situations

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI, Specific processing situations

Data protection impact assessment for AI Solutions by Danish DPA

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Mobilizing the legal basis of legitimateinterest to develop an AI system by CNIL

AI, Specific processing situations

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Orientations for ensuring data protection compliance when using Generative AI systems by EDPS

AI, Specific processing situations

GDPR & Generative AI A Guide for Customers by Microsoft

AI, Specific processing situations

Risk and control for artificial intelligence and machine learning systems by Cybernetica

AI, Specific processing situations

Governance of artificial intelligence (AI) by House of Commons UK

AI, Specific processing situations

DECISION OF THE INFORMATION COMMISSIONER Snap Inc. and Snap Group Limited

AI, Specific processing situations

Artificial intelligence (AI) and human rights: Using AI as a weapon of repression and its impact on human rights by EU Parliament

AI, Specific processing situations

Neurodata risks report by EDPS and Spanish DPA

AI, Specific processing situations

Orientation guide of the Conference of Independent Federal and State Data Protection Supervisory Authorities by the German Data Protection Conference (DSK)

AI, Specific processing situations

GDPR & GENERATIVE AI – A GUIDE FOR THE PUBLIC SECTOR BY MICROSOFT

AI, Specific processing situations

Convention on AI, Human Rights, Democracy and the Rule of Law – by the Council of Europe (draft)

AI, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce bg EDPB

A Guide to ICO Audit Artificial Intelligence (AI) Audits by UK ICO

AI, Specific processing situations

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)

AI, Specific processing situations

Opinion 19/2021 on the draft decision of the competent supervisory authority of Hungary regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EDPB

Accreditation

Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms by EDPB

Consent, Lawfulness of Processing

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Report and Recommendations of the New York State Bar Association Task Force on Artificial Intelligence

AI, Specific processing situations

Perspectives on Issues in AI Governance by Google

AI, Specific processing situations

Deploying AI Systems Securely by NSA

AI, Specific processing situations

Opinion 25/2021 on the draft decision of the competent supervisory authority of Lithuania regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EDPB

Accreditation

Opinion 35/2021 on the draft decision of the competent supervisory authority of Belgium regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 36/2021 on the draft decision of the competent supervisory authority of Norway regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 37/2021 on the draft decision of the competent supervisory authority of Malta regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Accreditation

Opinion 38/2021 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 12/2022 on the draft decision of the competent supervisory authority of France regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 13/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 11/2023 on the draft decision of the competent supervisory authority of Sweden regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Accreditation

Opinion 12/2023 on the draft decision of the competent supervisory authority of Cyprus regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 13/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 11/2022 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

Opinion 4/2023 on the draft decision of the competent supervisory authority of Malta regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Accreditation

EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro

Accreditation

EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679

Accreditation

Human rights Impact Assessments for AI by Access Now

AI, Data Protection Impact Assessment (DPIA)

GenAI and data protection: how organisations and their employees can use it appropriately and lawfully

AI, Employment

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Consent, Personal Data

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

Guidance on ai and data protection 2.0 | UK ICO

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Artificial Intelligence Risk Management Framework (AI RMF 1.0) by NIST

Guidelines 05/2020 on consent under Regulation 2016/679

Consent, Lawfulness of Processing

Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines cases under the GDPR

Right to Erasure

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

AI Meets Media: OpenAI Secures Another Multi-Year Deal with Media Giant

AI models collapse when trained on recursively generated data

AI, Specific processing situations

The government-wide vision on Generative Al of the Netherlands

AI, Data Processing by the Government, Specific processing situations

AI Possible Risks & Mitigations Optical Character Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI Possible Risks & Mitigations Named Entity Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI system development: CNIL’srecommendations to comply with the GDPR

AI, Specific processing situations

Administrative fine against Grindr LLC by The Norwegian Data Protection Authority

Consent, Lawfulness of Processing, Principles, Sensitive Data

AI Auditing Checklist for AI Auditing by EDPB

AI, Specific processing situations

AI, DATA GOVERNANCE AND PRIVACY SYNERGIES AND AREAS OF INTERNATIONAL CO-OPERATION BY OECD

AI, Specific processing situations

Supervision of AI systems in the EU by Dutch DPA and RDI (english)

AI, Specific processing situations

Statement on the interplay between AI Act and GDPR for private sector by the The Austrian DPA

AI, Specific processing situations

AI Development Recommendations to Ensure GDPR Compliance by CNIL

AI, Specific processing situations

The Colorado AI Act “Senate Bill SB24-205”

AI, Specific processing situations

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Privacy, seriously by the UK ICO

AI, Privacy by Design, Product Privacy Design

AI and Data Protection risk toolkit by the UK ICO

AI, Data Protection Impact Assessment (DPIA)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Remedies

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

Sending direct marketing messages: At-a-glance guide (UK ICO)

Consent, Lawfulness of Processing

The EDPB data protection guide for small business

AI, Risk Management