Resources

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Spanish Data Protection Authority (aepd)-AFIANZA ASESORES S.L. (3/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Company (5/20/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA (8/12/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Municipality of Nepi (6/20/2024)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-CAIXABANK S.A. (5/28/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Sanitaria Locale TO4 (5/23/2024)

Integrity and confidentiality, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-CUI ZSQ FOOD, S.L. (6/20/2024)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden-Avanza Bank AB (6/24/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ALLIANZ COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. (6/10/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-HIPERBAZAR YONGFA 2018 SL (3/21/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PILLOW HOTELS, S.L. (5/30/2024)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-President of a workers’ council (5/23/2024)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/7/2024)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/9/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-4FINANCE SPAIN FINANCIAL SERVICES, S.A.U. (5/7/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Hessen-Physician (7/15/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Information Commissioner (ICO)-Central Young Men’s Christian Association (4/30/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-INFORMÁTICA MÉDICA, S.L. (11/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ALPHA BANK ROMANIA SA. (4/23/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-SINDICATO LIBRE DE TRANSPORTES (11/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ) (2/28/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PRESTAMER, S.L. (4/12/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Ophthalmologic institute (10/26/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CENTRO MÉDICO SALUS BALEARES, S.L. (2/8/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. (11/2/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-NTT Data Italia S.P.A (2/8/2024)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-HISPAPOST, S.A. (2/1/2024)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A (1/19/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-UniCredit S.p.a. (2/8/2024)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Baden-Wuerttemberg-Pizza delivery service (7/15/1905)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A. (10/26/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ENDESA ENERGÍA, S.A.U. (10/25/2023)

Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-SOLAR PROGRESS, S.L. (12/7/2023)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (11/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-Garðabær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Hafnarfjörður (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Kópavogur (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-Reykjanesbær municipality (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavik (12/6/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Principles

Spanish Data Protection Authority (aepd)-FORO ASTURIAS (11/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Pharmacy owner (11/24/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-THE BEE LOGISTICS, S.L. (11/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Asl Napoli 3 Sud (9/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Ovest Milanese (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ILUNION SEGURIDAD, S.A. (10/10/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-NORDETIA CLINICS MÓSTOLES S.L. (10/10/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Autostrade per l’Italia spa (6/22/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Sweden-Trygg-Hansa (8/28/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Homeowners’ association (8/25/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ALBEN AIRPORT FACILITIES S.L. (8/29/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-WALL BOX CHARGERS S.L. (8/28/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-RCL CRUISES LTD (7/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-LISMARTSA, S.L. (7/5/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Private individual (6/6/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-La Risorsa Umana.it s.r.l. (3/23/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Sjúkratyringur Íslands (6/28/2023)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Heilsuveru (7/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ama S.p.a. (4/27/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-PELAYO, MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJA (6/1/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC (6/7/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Razmataz Live s.r.l.. (3/2/2023)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Bolzano municipality (3/23/2023)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Informatica Alto Adige Spa (3/23/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Commissioner of Malta-Unknown (7/12/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Homeowners’ association (5/5/2023)

Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-NAGA Markets Europe Ltd (5/2/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ASSOCIACIO DE CAÇADORS D’ALZIRA (4/28/2023)

Integrity and confidentiality, Principles

Data Protection Authority of Brandenburg-Bank (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Data Protection Authority of Brandenburg-Aid organization (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Azienda Ospedale-Università Padova (1/11/2023)

Integrity and confidentiality, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (3/16/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Attorney (2/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda ULSS n.5 Polesana (1/26/2023)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Authority of Ireland-Bank of Ireland 365 (2/27/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Italian Data Protection Authority (Garante)-Verizon Connect Italy S.p.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Data Protection Authority of Ireland-Centric Health Ltd. (1/23/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Private individual (2/21/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Tecnomed Trento s.r.l. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Pharmacy (7/14/1905)

Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-PRINTAFORM Ltd. (7/14/1905)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd. (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Cyprus Electricity Authority (7/14/1905)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Ospedaliero-Universitaria Careggi di Firenze (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Authority of Ireland-VIEC Limited (12/22/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Transport Workers’ Union of Aragon (1/3/2023)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Societatea Energetică Electrica S.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (12/27/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-I.S.P.R.O. (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Property owner administrative board (12/20/2022)

Integrity and confidentiality, Principles

Data Protection Authority of Ireland-Slane Credit Union Ltd. (1/26/2022)

Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-INDECEMI, S.L. (12/3/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CASA 7 PERSONAL SHOPPER, S.L. (12/2/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (11/3/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria S.L. (11/11/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BANKINTER, S.A. (11/15/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ginosa municipality (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Acqua Novara.VCO S.p.a. (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Information Commissioner (ICO)-Interserve Group Limited (10/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Servizio Idrico Integrato S.c.p.a. (10/6/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-OES GLOBAL ENERGY S.L. (10/17/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EL RACO DEL PIS INVERSIONES S.L. (10/25/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-URBANO DIVERTIA, S.L. (9/23/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/31/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-RESTEXPERIENCE, S.L. (10/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-EDYTE SA (9/6/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-Club Náutico el Estacio (10/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PUNTO BADAL-BCN S.L. (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Private individual (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EVERIS SPAIN S.L (10/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Belgian Data Protection Authority (APD)-Medical laboratory (8/19/2022)

Data Subjects Rights, Integrity and confidentiality

Polish National Personal Data Protection Office (UODO)-Sułkowice Cultural Center (9/7/2022)

Data Processing Agreement (DPA)

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Rhodense (7/21/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BAYARD REVISTAS, S.A. (9/28/2022)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Danish Immigration Agency (8/17/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-SOLIVESA MASTER FRANCHISE S.L. (8/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-NATURGY ENERGY GROUP, S.A. (8/28/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alpha Bank Romania SA (8/29/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Hellenic Data Protection Authority (HDPA)-Private Polyclinic and Diagnostic Centre of Pyle Axiou (8/3/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-UNONO NET 3.0, S.L. (8/22/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-FREE SUN ENERGY S.L. (7/12/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-JAÉN SENTIDO Y COMÚN (8/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ESTUDIOS EUROPEOS DE POSTGRADO Y EMPRESA, S.L. (7/29/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ESVETEL, S.L. (7/22/2022)

Controllers and Processors, Data Processing Agreement (DPA), Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Homeowners Association (7/26/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-EFS MANTENIMIENTO Y SERVICIOS TÉCNICOS, S.L. (7/26/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-DKV Seguros y Reaseguros, S.A.E. (7/13/2022)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Bookstore employee (7/19/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-BANKINTER, S.A. (7/18/2022)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Dei Sette Laghi (5/22/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Tavistock & Portman NHS Foundation Trust (6/9/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Parliament (3/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Ospedale San Raffaele s.r.l. (4/28/2022)

Integrity and confidentiality, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Wens Experience SRL (6/8/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kaufland Romania SCS (6/3/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-LORIS FUEL SHOP SRL (5/12/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-ISWEB S.p.A. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA)

Spanish Data Protection Authority (aepd)-LABORATORIOS GONZÁLEZ, S.L. (4/29/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-CAFFE VECCHIO, S.L. (4/28/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Brav s.r.l. (3/24/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-ASST di Lodi (4/26/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

French Data Protection Authority (CNIL)-DEDALUS BIOLOGIE (4/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Homeowners Association (4/12/2022)

Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (4/4/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Scanshare S.r.l. (2/10/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Polish National Personal Data Protection Office (UODO)-Fortum Marketing and Sales Polska S.A. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design

Polish National Personal Data Protection Office (UODO)-PIKA Sp. z o.o. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale Melegnano e della Martesana (2/10/2022)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda sanitaria unica regionale Marche (1/13/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-SEGURCAIXA ADESLAS, S.A. DE SEGUROS Y REASEGUROS (2/4/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-ASL Latina (12/17/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/1/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-ORANGE ESPAÑA VIRTUAL, S.L. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-XFERA MÓVILES, S.A. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (2/1/2022)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-PHARMA TALENTS, S.L.U. (1/14/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda USL di Parma (12/2/2021)

Integrity and confidentiality, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Travel agency (12/16/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Privacy by Design, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Uppsala hospital board (1/26/2022)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Società Med Store Saronno s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Casa di cura Fondazione Gaetano e Piera Borghi s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Società H San Raffaele Resnati s.r.l. (11/25/2021)

Integrity and confidentiality, Principles, Sensitive Data

Data Protection Commissioner of Malta-C-Planet (IT Solutions) Limited (1/17/2022)

Integrity and confidentiality, Principles, Representative

French Data Protection Authority (CNIL)-SLIMPAY (12/28/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Ica s.r.l. (12/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Hellenic Data Protection Authority (HDPA)-One Way Private Company (12/8/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Deputy Data Protection Ombudsman-Psykoterapiakeskus Vastaamo (12/7/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Information Commissioner (ICO)-Cabinet Office (11/25/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Valoris Center S.R.L. (11/26/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-HIV Scotland (10/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Ireland-MOVE Ireland (8/20/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

National Commission for Data Protection (CNPD)-Insurance company (8/5/2021)

Controllers and Processors, Data Breaches, Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/13/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Austrian Data Protection Authority (dsb)-Bank (7/13/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Østre Toten municipality (10/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Spanish Data Protection Authority (aepd)-CEDICO, CENTRO DE DIAGNÓSTICO POR LA IMÁGEN, S.L. (9/20/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Automecanica Jerez, S.L. (9/2/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-aiComply S.r.l. (6/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Actamedica SRL (8/24/2021)

Controllers and Processors, Data Breaches, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Aeroporto Guglielmo Marconi di Bologna S.p.a. (6/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DESPACHO TEJEDOR INFANTES CONSULTORES ASESORES (8/10/2021)

Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-President of the Zgierz District Court (8/13/2021)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-UST GLOBAL ESPAÑA, S.A. (7/27/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Marbella Resorts S.L. (7/6/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Italian Data Protection Authority (Garante)-Azienda Usl della Romagna (5/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Information Commissioner (ICO)-Mermaids (7/5/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (5/25/2021)

Controllers and Processors, Data Processing Agreement (DPA)

Italian Data Protection Authority (Garante)-Comune di Palermo (4/15/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Desolasol Restauración, S.L. (5/25/2021)

Integrity and confidentiality, Principles

Belgian Data Protection Authority (APD)-Financial company (4/26/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Lugera & Makler Broker S.R.L. (4/19/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Asesoría Alpi-Clúa S.L. (3/18/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Spanish Data Protection Authority (aepd)-Homeowners Association (3/9/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Hospital Campogrande DE (3/10/2021)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (3/10/2021)

Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-Krajowa Szkoła Sądownictwa i Prokuratury (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria di Parma (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl di Bologna (1/14/2021)

Integrity and confidentiality, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vamavi Phone S.L. (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Data Transfers

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. Amsterdam – Bucharest office (2/10/2021)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights

Spanish Data Protection Authority (aepd)-IDFINANCE Spain, S.L. (2/1/2021)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Agenzia regionale protezione ambientale Campania (ARPAC) (1/14/2021)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria Senese (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Unità Sanitaria Locale Toscana Sud Est (12/17/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Integrity and confidentiality, Principles

Belgian Data Protection Authority (APD)-Unknown (1/22/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Polish National Personal Data Protection Office (UODO)-ID Finance Poland Sp. z o.o. (12/17/2020)

Data Subjects Rights, Integrity and confidentiality, Principles, Technical and Organisational Measures (TOMs)

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Umeå University (12/11/2020)

Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Virgin Mobile Polska (12/14/2020)

Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Banca Transilvania SA (12/17/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Comercio Online Levante, S.L. (12/2/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Aleris Sjukvård AB (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Aleris Sjukvård AB (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Östergötland Region (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Västerbotten Region (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Sahlgrenska University Hospital (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Karolinska University Hospital of Solna (12/3/2020)

Integrity and confidentiality, Principles

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Capio St. Göran AB (12/3/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Losada Advocats S.L. (12/2/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Unknown (12/9/2020)

Integrity and confidentiality, Principles

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Information Commissioner (ICO)-Ticketmaster UK Limited (11/13/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) (9/30/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sanatatea Press Group S.R.L. (9/8/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Istituto Comprensivo Statale Crucoli Torretta (9/7/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Caja Rural San José de Nules S. Cooperativa de Crédito (10/9/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Barcelona Airport Security Guard Association (‘AVSAB’) (9/7/2020)

Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (6/9/2020)

Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Bergen Municipality (9/3/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Vodafone Romania (2/11/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Centro De Estudio Dirigidos Delta, S.L. (3/16/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Gesthotel Activos Balagares (3/9/2020)

Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Hørsholm Municipality (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Danish Data Protection Authority (Datatilsynet)-Gladsaxe Municipality (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-National Center of Addiction Medicine (‘SAA’) (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Icelandic data protection authority (‘Persónuvernd’)-Breiðholt Upper Secondary School (3/10/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Rælingen Municipality (2/26/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Grupo Valsor Y Losan, S.L. (2/14/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/14/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/14/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria Integrata di Verona (Hospital) (1/23/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Italian Data Protection Authority (Garante)-Sapienza Università di Roma (1/23/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-AEMA Hispánica (2/28/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/7/2020)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/23/2019)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (7/11/1905)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/11/1905)

Data Subjects Rights, Integrity and confidentiality, Principles

Polish National Personal Data Protection Office (UODO)-Major of Aleksandrów Kujawski (10/18/2019)

Controllers and Processors, Data Processing Agreement (DPA)

Slovak Data Protection Office-Unknown (Unknown)

Data Subjects Rights, Integrity and confidentiality, Principles

Slovak Data Protection Office-Unknown (Unknown)

Data Subjects Rights, Integrity and confidentiality, Principles

Norwegian Supervisory Authority (Datatilsynet)-Bergen Municipality (3/1/2019)

Data Subjects Rights, Integrity and confidentiality, Principles

Portuguese Data Protection Authority (CNPD)-Public Hospital (7/17/2018)

Data Subjects Rights, Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL) (Unknown)

Integrity and confidentiality, Principles

Spanish Data Protection Authority (aepd)-ENDESA (energy supplyer) (Unknown)

Integrity and confidentiality, Principles

Information Commissioner (ICO)-British Airways (10/16/2020)

Data Subjects Rights, Integrity and confidentiality, Principles

Data Protection Authority of Hamburg-Kolibri Image Regina und Dirk Maass GbR (12/17/2018)

Controllers and Processors, Data Processing Agreement (DPA)

Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive |EPDB

Adequacy Decisions, Data Transfers

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification, Controllers and Processors

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification, Controllers and Processors

Report on the first review of the functioning of the adequacy decisions adopted pursuant to Article 25(6) of Directive 95/46/EC

Adequacy Decisions, Data Transfers

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

Practical Guide on Controller to Processor Contracts by the Irish DPC

Controllers and Processors, Data Processing Agreement (DPA)

CASE OF BIG BROTHER WATCH AND OTHERS v. THE UNITED KINGDOM

National Security, Specific processing situations

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

Joined Cases C-511/18, C-512/18 and C-520/18

Criminal Convictions and Offences, National Security, Principles, Specific processing situations

Case C‑461/22 CURIA

Data Controller, Definitions

Information note by EDPB on data transfers under the GDPR to the United States after the adoption of the adequacy decision on 10 July 2023

Adequacy Decisions, Data Transfers

Opinion 14/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the United Kingdom |EPDB

Adequacy Decisions, Data Transfers

Opinion 15/2021 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data in the United Kingdom |EDPB

Adequacy Decisions, Data Transfers

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EDPB

Adequacy Decisions, Data Transfers

Information Note by EDPB on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national security

Adequacy Decisions, Data Transfers

EU-US Data Privacy Framework Template Complaint Form for Submitting Commercial Related Complaints to EU DPAs by EDPB

Adequacy Decisions, Data Transfers

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification, Controllers and Processors

Opinion 32/2021 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data in the Republic of Korea |EPDB

Adequacy Decisions, Data Transfers

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification, Controllers and Processors

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification, Controllers and Processors

Opinion 5/2023 on the European Commission Draft Implementing Decision on the adequate protection of personal data under the EU-US Data Privacy Framework |EPDB

Adequacy Decisions, Data Transfers

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification, Controllers and Processors

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

Data Sharing Code | UK ICO

Data Processing Agreement (DPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

COMMISSION IMPLEMENTING DECISION of 10.7.2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework

Adequacy Decisions, Data Transfers

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

Review of cybersecurity news in Ukraine, tendencies, and world events related to the First World Cyber War by U.S. Agency for International Development

National Security, Specific processing situations

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Rules of Procedure for the “Informal Panel of EU DPAs”according to the EU-US Data Privacy Framework by EDPB

Adequacy Decisions, Data Transfers

Template Complaint Form to the U.S. Office of the Director of National Intelligence’s Civil Liberties Protection Officer (CLPO) by EDPB

Adequacy Decisions, Data Transfers

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency