Resources

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

OH Digitale Dienste version 1.2 by German data protection authority

PRACTICAL GUIDE FOR DATA PROTECTION OFFICERS BY CNIL

Data Protection Officer (DPO)

UK’s New Data Use Bill: Easier Access and Enhanced Privacy for All

Local Laws

Italian Data Protection Authority (Garante)-Rossi Carta S.r.l. (4/24/2024)

Access Requests (DSAR), Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Dly S.r.l. (4/24/2024)

Data Protection Officer (DPO), Lawfulness of Processing

Italian Data Protection Authority (Garante)-Libero Consorzio comunale di Enna (4/11/2024)

Data Protection Officer (DPO)

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Italian Data Protection Authority (Garante)-Municipality of Siracusa (1/31/2024)

Controllers and Processors, Data Protection Officer (DPO)

Italian Data Protection Authority (Garante)-Libero Consorzio comunale di Caltanissetta (1/31/2024)

Controllers and Processors, Data Protection Officer (DPO)

Italian Data Protection Authority (Garante)-Provincia di Catanzaro (1/31/2024)

Controllers and Processors, Data Protection Officer (DPO)

Italian Data Protection Authority (Garante)-Provincia di Sassari (1/31/2024)

Controllers and Processors, Data Protection Officer (DPO)

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-GYMOOGIMNASIOS S.L. (8/2/2023)

Controllers and Processors, Data minimisation, Data Protection Officer (DPO), Principles

National Commission for Data Protection (CNPD)-Company (10/27/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-News service (11/15/2022)

Consent, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Poliambulatorio Radiologico ‘il Sorriso’ S.r.l. (11/10/2022)

Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Principles

Italian Data Protection Authority (Garante)-Cisterna di Latina municipality (11/10/2022)

Controllers and Processors, Data Protection Officer (DPO), Principles

Italian Data Protection Authority (Garante)-Cisterna di Latina Municipality (11/10/2022)

Controllers and Processors, Data Protection Officer (DPO), Principles

Austrian Data Protection Authority (dsb)-Private individual (7/13/1905)

Data Protection Officer (DPO), Lawfulness of Processing

Data Protection Authority of Berlin-Company (9/20/2022)

Controllers and Processors, Data Protection Officer (DPO)

Italian Data Protection Authority (Garante)-Villabate municipality (5/12/2022)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-SA Rossel & Cie (6/16/2022)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Made in Italy s.r.l.s. (4/7/2022)

Access Requests (DSAR), Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Centro di Medicina preventiva s.r.l. (12/16/2021)

Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Principles, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-Greek Ministry of Tourism (12/29/2021)

Controllers and Processors, Data Breaches, Data Protection Officer (DPO), Data Subjects Rights

Belgian Data Protection Authority (APD)-Bank (12/16/2021)

Controllers and Processors, Data Protection Officer (DPO)

National Commission for Data Protection (CNPD)-Unknown (10/27/2021)

Data Protection Officer (DPO)

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (10/13/2021)

Controllers and Processors, Data Protection Officer (DPO), Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-ACONCAGUA JUEGOS S.A. (9/29/2021)

Controllers and Processors, Data Protection Officer (DPO)

Austrian Data Protection Authority (dsb)-Unser Ö-Bonus Club GmbH (8/2/2021)

Data Protection Officer (DPO), Lawfulness of Processing

Deputy Data Protection Ombudsman-Magazine publisher (6/24/2021)

Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Data Protection Officer (DPO)

National Commission for Data Protection (CNPD)-Unknown (5/31/2021)

Data Protection Officer (DPO)

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Online Services (12/15/2020)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Conseguridad SL (10/26/2020)

Controllers and Processors, Data Protection Officer (DPO)

Spanish Data Protection Authority (aepd)-El Real Sporting de Gijón S.A.D. (7/23/2020)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing

Belgian Data Protection Authority (APD)-Operator of CCTV of a residential building (7/14/2020)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Glovoapp23 (6/9/2020)

Controllers and Processors, Data Protection Officer (DPO)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Estee Lauder Romania (4/23/2020)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing, Principles, Sensitive Data

Belgian Data Protection Authority (APD)-Proximus SA (4/28/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Representative

Data Protection Authority of Hamburg-Facebook Germany GmbH (7/11/1905)

Controllers and Processors, Data Protection Officer (DPO)

The Federal Commissioner for Data Protection and Freedom of Information (BfDI)-Rapidata GmbH (12/9/2019)

Controllers and Processors, Data Protection Officer (DPO)

Czech Data Protection Auhtority (UOOU)-Alza.cz a.s. (Unknown)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing

Austrian Data Protection Authority (dsb)-Company in the medical sector (8/1/2019)

Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Professional Football League (LaLiga) (6/11/2019)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Chief Information Security Officer_ HANDBOOK

Risk Management

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Risk Management

National Strategy to Advance Privacy-Preserving Data Sharing and Analytics by the EO by the US President

Anonymisation, Controllers and Processors, Technical and Organisational Measures (TOMs)

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

Risk Management

2023 Coordinated Enforcement Action Designation and Position of Data Protection Officers by EDPB

Controllers and Processors, Data Protection Officer (DPO)

Case C 683-2021

Data Controller, Data Processors, Joint Controllers

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Guidelines for evaluating differential priavacy gurantees by NIST

Anonymisation, Controllers and Processors, Technical and Organisational Measures (TOMs)

Practice Guide to Anonymising Personal Data

Anonymisation, Controllers and Processors

C-272/19

Access Requests (DSAR), Data Controller, Data Subjects Rights, Definitions

C-534/20

Controllers and Processors, Data Protection Officer (DPO)

C-453/21

Controllers and Processors, Data Protection Officer (DPO)

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Case C‑461/22 CURIA

Data Controller, Definitions

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Risk Management

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject |EPDB

Data Controller, Data Subjects Rights, Definitions

Certified Data Protection Officer by PECB

Data Protection Officer (DPO)

Practice Guide to Anonymising Personal Data by Stiftung Dateschutz

Anonymisation

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Fashion ID, 29 July 2019, C-40/17, ECLI:EU:C:2019:629

Data Controller, Data Processors

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, in the presence of Facebook Ireland Ltd (Case C-210/16).

Data Controller

GUIDE TO BASIC ANONYMISATION | PDPC Singapore

Anonymisation

Guidance on Anonymisation and Pseudonymisation | Irish DPC

Anonymisation

Opinion 05/2014 on Anonymisation Techniques | WP216

Anonymisation

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

UK MRC Identifiability, anonymisation and pseudonymisation

Anonymisation

Guidelines on Data Protection Officers (‘DPOs’)

Data Protection Officer (DPO)

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Data Controller, Data Processors, Definitions

Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications

Connected Vihicles

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Anonymisation: managing data protection risk code of practice | UK ICO

Anonymisation

Spanish AEPD: 10 MISUNDERSTANDINGS RELATED TO ANONYMISATION

Anonymisation

Board of Directors Handbook for Cloud Risk Governance | Google

Risk Management

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management