Resources

Case T-262/24 Commission v EDPS

Data Processing Agreement (DPA), Data Sharing, Records of processing Activities (ROPA)

Italy’s Data Protection Authority Fines Foodinho €5 Million for Data Violations

Administrative Fines, Employment, Lawfulness of Processing

Proof of concept Blockchain and the right to erasure by AEPD

Right to Erasure

OH Digitale Dienste version 1.2 by German data protection authority

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Austrian Data Protection Authority (dsb)-Website operator (1/4/2024)

Administratives Measures, Data Subjects Rights, Liability and Remedies, Right to Erasure

Data Protection Authority of Hamburg-Company (7/12/1905)

Definitions, Joint Controllers

Spanish Data Protection Authority (aepd)-ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE (11/30/2021)

Data Subjects Rights, Right to Erasure

Spanish Data Protection Authority (aepd)-ASOCIACIÓN ESPAÑOLA PARA LA ENSEÑANZA ONLINE (11/30/2021)

Data Subjects Rights, Right to Erasure

Spanish Data Protection Authority (aepd)-UNIVERSIDAD A DISTANCIA DE MADRID, S.A. (7/29/2021)

Data Subjects Rights, Right to Erasure

Spanish Data Protection Authority (aepd)-Pagamastarde S.L. (4/27/2021)

Data Subjects Rights, Right to Erasure

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

Case C‑604/22

Joint Controllers, Personal Data

Opinion 37/2023 on the draft decision of the competent supervisory authority of Luxemburg regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR) |EPDB

Certification

Opinion 38/2023 on the draft decision of the competent supervisory authority of Slovenian regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR). |EPDB

Certification

PRESS RELEASE No 20/24 | Case C-118-22

Data Subjects Rights, Right to Erasure

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Remedies, Supervisory Authorities

C-460/20

Data Subjects Rights, Right to Erasure, Search Engines, Specific processing situations

One-Stop-Shop thematic case digest: RIGHT TO OBJECTAND RIGHT TO ERASURE

Data Subjects Rights, Right to Erasure, Right to Object

C-507/17

Data Subjects Rights, Right to Erasure, Territorial Scope

C-136/17

Data Subjects Rights, Principles, Right to Erasure, Search Engines, Sensitive Data, Specific processing situations

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

Case C-60/22

Accountability, Controllers and Processors, Joint Controllers, Principles

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria |EPDB

Certification

Opinion 25/2022 regarding the European Privacy Seal (EuroPriSe ) certification criteria for the certification of processing operations by processors |EPDB

Certification

Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria |EPDB

Certification

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) |EPDB

Certification

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines cases under the GDPR

Right to Erasure

Guidelines 1/2018 on certification and identifying certification criteria in accordance with Articles 42 and 43 of the Regulation

Certification

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

Certification

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Guidelines 07/2022 on certification as a tool for transfers

Certification

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation