Resources

Italy’s Data Protection Authority Fines Foodinho €5 Million for Data Violations

Administrative Fines, Employment, Lawfulness of Processing

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

Spanish Data Protection Authority (aepd)-AFIANZA ASESORES S.L. (3/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Company (5/20/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA (8/12/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Socio-sanitaria Territoriale Rhodense (5/23/2024)

Accuracy, Data Subjects Rights

Spanish Data Protection Authority (aepd)-CAIXABANK S.A. (5/28/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Sanitaria Locale TO4 (5/23/2024)

Integrity and confidentiality, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (6/12/2024)

Accuracy, Principles

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-CUI ZSQ FOOD, S.L. (6/20/2024)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden-Avanza Bank AB (6/24/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ALLIANZ COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. (6/10/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-HIPERBAZAR YONGFA 2018 SL (3/21/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PILLOW HOTELS, S.L. (5/30/2024)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-President of a workers’ council (5/23/2024)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/7/2024)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/9/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-4FINANCE SPAIN FINANCIAL SERVICES, S.A.U. (5/7/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hessen-Physician (7/15/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Information Commissioner (ICO)-Central Young Men’s Christian Association (4/30/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (4/5/2024)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-SINDICATO LIBRE DE TRANSPORTES (11/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ) (2/28/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PRESTAMER, S.L. (4/12/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Ophthalmologic institute (10/26/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CENTRO MÉDICO SALUS BALEARES, S.L. (2/8/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. (11/2/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/15/1905)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A (1/19/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-UniCredit S.p.a. (2/8/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Baden-Wuerttemberg-Pizza delivery service (7/15/1905)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Oney Servicios Financieros E.F.C. (10/23/2023)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A. (10/26/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ENDESA ENERGÍA, S.A.U. (10/25/2023)

Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-SOLAR PROGRESS, S.L. (12/7/2023)

Integrity and confidentiality, Principles

French Data Protection Authority (CNIL)-Company (12/22/2023)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Homeowners’ association (11/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-FORO ASTURIAS (11/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Pharmacy owner (11/24/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Mednow Medical Center di Giugni Marco (8/31/2023)

Accuracy, Data Subjects Rights, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-THE BEE LOGISTICS, S.L. (11/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Asl Napoli 3 Sud (9/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Ovest Milanese (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ILUNION SEGURIDAD, S.A. (10/10/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-NORDETIA CLINICS MÓSTOLES S.L. (10/10/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Sweden-Trygg-Hansa (8/28/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (8/25/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ALBEN AIRPORT FACILITIES S.L. (8/29/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-WALL BOX CHARGERS S.L. (8/28/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-RCL CRUISES LTD (7/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-LISMARTSA, S.L. (7/5/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Private individual (6/6/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Sjúkratyringur Íslands (6/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Heilsuveru (7/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-PELAYO, MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJA (6/1/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC (6/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Bolzano municipality (3/23/2023)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Informatica Alto Adige Spa (3/23/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/5/2023)

Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-NAGA Markets Europe Ltd (5/2/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ASSOCIACIO DE CAÇADORS D’ALZIRA (4/28/2023)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedale-Università Padova (1/11/2023)

Integrity and confidentiality, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (3/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Attorney (2/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda ULSS n.5 Polesana (1/26/2023)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Authority of Ireland-Bank of Ireland 365 (2/27/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Ireland-Centric Health Ltd. (1/23/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (2/21/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Belgian Data Protection Authority (APD)-Company (8/23/2022)

Accuracy, Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Baden-Wuerttemberg-Pharmacy (7/14/1905)

Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cyprus Electricity Authority (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Ospedaliero-Universitaria Careggi di Firenze (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Authority of Ireland-VIEC Limited (12/22/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Areti spa (11/24/2022)

Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Transport Workers’ Union of Aragon (1/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-I.S.P.R.O. (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Property owner administrative board (12/20/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-INDECEMI, S.L. (12/3/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CASA 7 PERSONAL SHOPPER, S.L. (12/2/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Ireland-Slane Credit Union Ltd. (1/26/2022)

Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

Spanish Data Protection Authority (aepd)-UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (11/3/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria S.L. (11/11/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BANKINTER, S.A. (11/15/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Interserve Group Limited (10/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Servizio Idrico Integrato S.c.p.a. (10/6/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-OES GLOBAL ENERGY S.L. (10/17/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EL RACO DEL PIS INVERSIONES S.L. (10/25/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-URBANO DIVERTIA, S.L. (9/23/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/31/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-RESTEXPERIENCE, S.L. (10/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Club Náutico el Estacio (10/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PUNTO BADAL-BCN S.L. (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Private individual (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EVERIS SPAIN S.L (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Belgian Data Protection Authority (APD)-Medical laboratory (8/19/2022)

Data Subjects Rights, Integrity and confidentiality

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Rhodense (7/21/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BAYARD REVISTAS, S.A. (9/28/2022)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Danish Immigration Agency (8/17/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Raiffeisen Bank SA (9/9/2022)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-NATURGY ENERGY GROUP, S.A. (8/28/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-Private Polyclinic and Diagnostic Centre of Pyle Axiou (8/3/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-UNONO NET 3.0, S.L. (8/22/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-FREE SUN ENERGY S.L. (7/12/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-JAÉN SENTIDO Y COMÚN (8/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ESTUDIOS EUROPEOS DE POSTGRADO Y EMPRESA, S.L. (7/29/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners Association (7/26/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EFS MANTENIMIENTO Y SERVICIOS TÉCNICOS, S.L. (7/26/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Bar owner (7/19/2022)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-DKV Seguros y Reaseguros, S.A.E. (7/13/2022)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Bookstore employee (7/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BANKINTER, S.A. (7/18/2022)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Dei Sette Laghi (5/22/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Tavistock & Portman NHS Foundation Trust (6/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Parliament (3/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Ospedale San Raffaele s.r.l. (4/28/2022)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Authority of Hessen-Restaurant (7/13/1905)

Principles, Purpose limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-LABORATORIOS GONZÁLEZ, S.L. (4/29/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CAFFE VECCHIO, S.L. (4/28/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Brav s.r.l. (3/24/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-ASST di Lodi (4/26/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Homeowners Association (4/12/2022)

Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (4/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Fortum Marketing and Sales Polska S.A. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale Melegnano e della Martesana (2/10/2022)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda sanitaria unica regionale Marche (1/13/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-ASL Latina (12/17/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/1/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-ORANGE ESPAÑA VIRTUAL, S.L. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-XFERA MÓVILES, S.A. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PHARMA TALENTS, S.L.U. (1/14/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda USL di Parma (12/2/2021)

Integrity and confidentiality, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Travel agency (12/16/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Uppsala hospital board (1/26/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Società Med Store Saronno s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Casa di cura Fondazione Gaetano e Piera Borghi s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Società H San Raffaele Resnati s.r.l. (11/25/2021)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Commissioner of Malta-C-Planet (IT Solutions) Limited (1/17/2022)

Integrity and confidentiality, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (12/6/2021)

Access Requests (DSAR), Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Ica s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Deputy Data Protection Ombudsman-Psykoterapiakeskus Vastaamo (12/7/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Information Commissioner (ICO)-Cabinet Office (11/25/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Information Commissioner (ICO)-HIV Scotland (10/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Ireland-MOVE Ireland (8/20/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

National Commission for Data Protection (CNPD)-Insurance company (8/5/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/13/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Austrian Data Protection Authority (dsb)-Bank (7/13/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Østre Toten municipality (10/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Bar owner (9/28/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-CEDICO, CENTRO DE DIAGNÓSTICO POR LA IMÁGEN, S.L. (9/20/2021)

Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-Automecanica Jerez, S.L. (9/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Magyar Telekom Nyrt. (6/18/2021)

Accuracy, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Aeroporto Guglielmo Marconi di Bologna S.p.a. (6/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DESPACHO TEJEDOR INFANTES CONSULTORES ASESORES (8/10/2021)

Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-President of the Zgierz District Court (8/13/2021)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-UST GLOBAL ESPAÑA, S.A. (7/27/2021)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Usl della Romagna (5/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Information Commissioner (ICO)-Mermaids (7/5/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-TNT EXPRESS WORLDWIDE SPAIN, S.L. (6/22/2021)

Accuracy, Principles

Italian Data Protection Authority (Garante)-Comune di Palermo (4/15/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Desolasol Restauración, S.L. (5/25/2021)

Integrity and confidentiality, Principles

Belgian Data Protection Authority (APD)-Financial company (4/26/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Asesoría Alpi-Clúa S.L. (3/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Certime S.A. (3/15/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Homeowners Association (3/9/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Hospital Campogrande DE (3/10/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria di Parma (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl di Bologna (1/14/2021)

Integrity and confidentiality, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Krajowa Szkoła Sądownictwa i Prokuratury (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Iberdrola Clientes (2/3/2021)

Accuracy, Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-IDFINANCE Spain, S.L. (2/1/2021)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Agenzia regionale protezione ambientale Campania (ARPAC) (1/14/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria Senese (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (11/18/2020)

Accuracy, Principles

Belgian Data Protection Authority (APD)-Unknown (1/22/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Unità Sanitaria Locale Toscana Sud Est (12/17/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/4/2021)

Accuracy, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-ID Finance Poland Sp. z o.o. (12/17/2020)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria, S.A. (12/21/2020)

Accuracy, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Umeå University (12/11/2020)

Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Virgin Mobile Polska (12/14/2020)

Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Banca Transilvania SA (12/17/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Comercio Online Levante, S.L. (12/2/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Aleris Sjukvård AB (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Aleris Sjukvård AB (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Östergötland Region (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Västerbotten Region (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Sahlgrenska University Hospital (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Karolinska University Hospital of Solna (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Capio St. Göran AB (12/3/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Losada Advocats S.L. (12/2/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Unknown (12/9/2020)

Integrity and confidentiality, Principles

Lithuanian Data Protection Authority (VDAI)-Vilnius City Municipality Administration (10/21/2020)

Accuracy, Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Ticketmaster UK Limited (11/13/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sanatatea Press Group S.R.L. (9/8/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Istituto Comprensivo Statale Crucoli Torretta (9/7/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Caja Rural San José de Nules S. Cooperativa de Crédito (10/9/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Party of the Socialists of Catalonia (8/17/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bankia S.A. (8/28/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Barcelona Airport Security Guard Association (‘AVSAB’) (9/7/2020)

Integrity and confidentiality, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (6/9/2020)

Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Bergen Municipality (9/3/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Vodafone Romania (2/11/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Centro De Estudio Dirigidos Delta, S.L. (3/16/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Gesthotel Activos Balagares (3/9/2020)

Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Hørsholm Municipality (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Gladsaxe Municipality (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-National Center of Addiction Medicine (‘SAA’) (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-Breiðholt Upper Secondary School (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Rælingen Municipality (2/26/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Grupo Valsor Y Losan, S.L. (2/14/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/14/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/14/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria Integrata di Verona (Hospital) (1/23/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Sapienza Università di Roma (1/23/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-AEMA Hispánica (2/28/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/7/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/23/2019)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (7/11/1905)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/11/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Slovak Data Protection Office-Unknown (Unknown)

Data Subjects Rights, Integrity and confidentiality, Principles

Slovak Data Protection Office-Unknown (Unknown)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (Unknown)

Accuracy, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (Unknown)

Accuracy, Principles

Norwegian Supervisory Authority (Datatilsynet)-Bergen Municipality (3/1/2019)

Data Subjects Rights, Integrity and confidentiality, Principles

Portuguese Data Protection Authority (CNPD)-Public Hospital (7/17/2018)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL) (Unknown)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ENDESA (energy supplyer) (Unknown)

Integrity and confidentiality, Principles

Information Commissioner (ICO)-British Airways (10/16/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (2/8/2019)

Accuracy, Principles

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

GUIDELINES CLOCKING AND ATTENDANCE CONTROL PROCESSING USING BIOMETRIC SYSTEMS BY THE AEPD

Employment, Principles, Sensitive Data, Specific processing situations

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

[Draft] Guidelines on the processing of personal data in regard to employment by the UK ICO

Employment, Specific processing situations

Everything Recruiters Need to Know About GDPR by ZOHO

Employment, Specific processing situations

Opinion on processing of CCTV data in regard to employee performance analytics by the Bulgarian DPA

CCTV, Employment, Specific processing situations

Protection of workers’ personal data: General principles by ILO

Employment, Specific processing situations

Data protection and monitoring workers

Employment, Specific processing situations

Recommendations 1-2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Code of Conduct, Controllers and Processors

C-34/21

Employment, Specific processing situations

C-77/21

Principles, Purpose limitation

Data protection code of practice for digital identity schemes in Afrtica

Code of Conduct, Controllers and Processors

Opinion 23/2021 on the draft decision of the competent supervisory authority of Czech Republic regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EDPB

Code of Conduct, Controllers and Processors

Opinion 24/2021 on the draft decision of the competent supervisory authority of Slovakia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EDPB

Code of Conduct, Controllers and Processors

Opinion 16/2021 on the draft decision of the Belgian Supervisory Authority regarding the “EU Data Protection Code of Conduct for Cloud Service Providers” submitted by Scope Europe |EDPB

Code of Conduct, Controllers and Processors

Opinion 17/2021 on the draft decision of the French Supervisory Authority regarding the European code of conduct submitted by the Cloud Infrastructure Service Providers (CISPE) |EDPB

Code of Conduct, Controllers and Processors

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 14/2022 on the draft decision of the competent supervisory authority of Bulgaria regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 15/2022 on the draft decision of the competent supervisory authority of Luxembourg regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 16/2022 on the draft decision of the competent supervisory authority of Slovenia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 1/2023 on the draft decision of the competent supervisory authority of Croatia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 02/2023 on the draft decision of the competent supervisory authority of Latvia regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to Article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 03/2023 on the draft decision of the competent supervisory authority of Romania regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR |EPDB

Code of Conduct, Controllers and Processors

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

How to deal with SARs as an employer by the UK ICO

Access Requests (DSAR), Employment

GenAI and data protection: how organisations and their employees can use it appropriately and lawfully

AI, Employment

Guidance Note: Employer Vehicle Tracking | Irish DPC

Employment

Members of the Code of Conduct for Cloud Infrastructure Service Providers

Code of Conduct

Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

Code of Conduct

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

Guidelines 07/2022 on certification as a tool for transfers

Certification

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

The Employment Practices Code | UK ICO

Data Subjects Rights, Employment