Resources

Norwegian DPA decision Against Familiekanalen for Violating Children’s Privacy

Children as data subjects

Assessing Potential Future AI Risks, Benefits, and Policy Imperatives OECD

AI, Risk Management, Technical and Organisational Measures (TOMs)

Reducing Risks Posed by Synthetic Content by NIST

AI, Risk Management, Technical and Organisational Measures (TOMs)

CAIDP Responds to Outcome of U.S. Convening of AI Safety Institutes

AI, Risk Management, Technical and Organisational Measures (TOMs)

New Australian Law will Mandate Age Checks, Data Deletion for Social Media Platforms

Children as data subjects

OH Digitale Dienste version 1.2 by German data protection authority

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

Meta’s New Ad Model in the EU: Consent or Contextual Ads?

Consent, Data Subjects Rights

Age-Appropriate Design Toolkit Tracker

Children as data subjects

Age Appropriate Design Toolkit Tracker- more information about the Toolkit by UK ICO

Children as data subjects

RTL Belgium Ordered to Add “Refuse All” Button to Cookie Banner by Belgian DPA

Consent

Polish National Personal Data Protection Office (UODO)-National Prosecutor’s Office (9/2/2024)

Consent, Controllers and Processors, Data Breaches, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Private individual (7/18/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ASSOCIACIO OASIS CULTURAL (4/26/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-WWPD CINVENTO INTERNATIONAL PATENT TRADING, S.L. (7/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NATURGY IBERIA, S.A. (6/10/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Club Balonmano Gijón (6/17/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-ARRENDAMIENTOS DEUDORES, S.L. (5/7/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azzurro Club Hotels S.r.l. (5/9/2024)

Access Requests (DSAR), Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/15/2024)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (4/22/2024)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Italian Data Protection Authority (Garante)-Mas s.r.l. (4/13/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mas s.r.l.s. (4/13/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/1/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/29/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK, S.A (4/12/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Brandenburg-Supermarket (7/15/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/8/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (2/13/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE S.A.U. (1/23/2024)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/23/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-VUKMAL TRADE, S.L. (1/24/2024)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/15/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/17/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/31/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

French Data Protection Authority (CNIL)-Company (12/22/2023)

Principles, Purpose limitation

Hellenic Data Protection Authority (HDPA)-Municipality (11/7/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/28/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (11/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (11/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (11/22/2023)

Consent, Lawfulness of Processing

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

Italian Data Protection Authority (Garante)-Scionti Selezioni Superiori S.r.l. (10/12/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Compara Facile S.r.l. (7/18/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (11/15/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (11/16/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Spark Car Sharing SRL (10/25/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (11/6/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Croatian Data Protection Authority (azop)-Betting company (9/14/2023)

Consent, Data Protection Officer (DPO), Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/11/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Schockholm School borard (10/3/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

French Data Protection Authority (CNIL)-GROUPE CANAL + (10/12/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (10/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (9/26/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Hotel (9/26/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (9/7/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-JOLY DIGITAL, S.L.U. (8/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/16/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/28/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (8/30/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/1/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/31/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/27/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (7/18/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NANDIVALE, S.L (7/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L. (7/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (7/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ODAFONE SERVICIOS, S.L.U. (7/3/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-KUGELCHEN PROPIERTIES, S.L. (7/7/2023)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Almennri innheimtu ehf (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-eCommerce 2020 ApS (6/27/2023)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Creditinfo Lánstraust hf. (6/27/2023)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Sweden-Bonnier News AB (6/26/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (6/21/2023)

Consent, Lawfulness of Processing

French Data Protection Authority (CNIL)-CRITEO (6/15/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/14/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ALPA 57 PRODUCCIONES (6/5/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (6/6/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Digi Spain Telecom, S.L.U. (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-FUSIONA SOLUCIONES ENERGÉTICAS, S.A. (5/17/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (6/9/2023)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Compania Națională Poșta Română S.A. (5/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Global Baby Brand SRL (5/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/24/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Sports betting operator (5/18/2023)

Consent, Lawfulness of Processing, Principles, Privacy by Design

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (6/6/2023)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-I&S Limited Kft (2/6/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Credit institution (7/14/1905)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-ESTUDIO INMOBILIARIO SAN ISIDRO, S.L.U. (5/9/2023)

Consent, Lawfulness of Processing

Bulgarian Commission for Personal Data Protection (KZLD)-Political party (7/14/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Aesse S.r.l.s. (3/9/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-FUNDACIÓ PRIVADA UNIVERSITARIA EADA (5/5/2023)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Coin dealer (9/12/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Debt collection agency (5/4/2023)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Epic Ltd. (2/3/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-DIGI SPAIN TELECOM, S.L. (4/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, S.A.U. (4/24/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ONO, S.A.U. (3/10/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (4/4/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-TV2 Média Csoport Zrt. (9/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-CITIZENGO FOUNDATION (2/28/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Private individual (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Data Protection Authority of Bremen-Company (7/14/1905)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ENFOKA SISTEMAS GLOBALES, S.L. (4/4/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (3/23/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (3/21/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Edison Energia S.p.A. (12/15/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Private individual (2/21/2023)

Consent, Lawfulness of Processing

Croatian Data Protection Authority (azop)-Telecommunications company (Unknown)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-News service (11/15/2022)

Consent, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Baden-Wuerttemberg-Debt collection company (7/14/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Sats ASA (2/6/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Dentist (1/31/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-FACTOR ENERGÍA, S.A. (1/2/2023)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fondazione Teatro Regio di Torino (10/20/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Homeowners Association (12/28/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CASAL DE L’ESPLUGA DE FRANCOLÍ (1/25/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. (12/29/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/16/2023)

Consent, Lawfulness of Processing

Data Protection Authority of Ireland-WhatsApp Ireland Ltd. (1/19/2023)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-I-Model s.r.l. (11/10/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L. (1/12/2023)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (12/13/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HOSPITAL RECOLETAS PONFERRADA, S.L. (12/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (12/15/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/20/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/10/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-ÉLECTRICITÉ DE FRANCE (11/24/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CÍTRICOS TANTA, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Rapido Finance, S.L. (11/2/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TECHPUMP SOLUTIONS S.L. (10/31/2022)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-XASTRE DO PETO, S.L. (11/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

Spanish Data Protection Authority (aepd)-ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP (10/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (9/1/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-SEAN SERIOS S.L. (10/14/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (10/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. (10/9/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-UNION DE OFICIALES DE LA GUARDIA CIVIL PROFESIONAL (10/9/2022)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (10/3/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Surveyor (9/21/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Federazione Italiana Sommelier, Albergatori e Ristoratori (6/30/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Baden-Wuerttemberg-Property development company (9/21/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MARIELI GABRIELA, S.L. (9/16/2022)

Consent, Lawfulness of Processing

Data Protection Authority of Ireland-Meta Platforms, Inc. (9/5/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-DIGITECNIA SOLUTIONS, S.L. (8/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ECOZONO Y CULTURA, S.L. (7/15/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-TELEFÓNICA MÓVILES ESPAÑA, S.A.U. (7/26/2022)

Consent, Lawfulness of Processing

Data Protection Authority of Niedersachsen-Hannoversche Volksbank (7/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Bar owner (7/19/2022)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-FLY FUT, S.L. (6/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Alquiler Seguro SA (5/24/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/6/2022)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Nos s.r.l.s. (4/28/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-SA Rossel & Cie (6/16/2022)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Data Protection Authority of Hessen-Restaurant (7/13/1905)

Principles, Purpose limitation

Norwegian Supervisory Authority (Datatilsynet)-Company (3/15/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Object

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (5/20/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Spanish Data Protection Authority (aepd)-Private individual (5/12/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (5/17/2022)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Physician (4/22/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Nationale Maatschappij der Belgische Spoorwegen (5/4/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-MISTORE CANARIAS, S.L. (5/3/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEDEROS MOVITEN, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Working Capital Management España, S.L. (4/28/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-JIMBO NETWORKS, S.L. (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Website operator (4/18/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MOVALIA TRASLADOS, S.L.U. (4/23/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (2/4/2022)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Etterforsker1 Gruppen AS (2/1/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Amazon Road Transport Spain S.L. (2/11/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (2/16/2022)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-IAB Europe (2/2/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Researcher (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Belgian Data Protection Authority (APD)-EU DisinfoLab (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Data Protection Authority of Brandenburg-Operator of a ballet school (7/12/1905)

Consent, Lawfulness of Processing, Principles

Data Protection Authority of Brandenburg-Medical assistant (7/12/1905)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Lawyer (12/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Cyrana España General S.L. (1/31/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-EDUCANDO JUNTOS SL (1/11/2022)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE ESPAÑA, S.A.U. (1/18/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MEETING PUERTO C.B. (1/17/2022)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-FUNDACION ESPANOLA DE MEDICINA ESTETICA Y LONGEVIDAD (12/21/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO RITMO DE ANDALUCÍA (12/17/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private individual (12/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Sfam España General s.l. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-HUBSIDE IBÉRICA S.L. (12/22/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-REAL CLUB NÁUTICO DE RIBADEO (12/28/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (12/7/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Norwegian State Pension Fund (SPK) (11/24/2021)

Consent, Data minimisation, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Grindr LLC (12/13/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Car importer (10/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/23/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (11/23/2021)

Consent, Lawfulness of Processing

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-UNIÓN FINANCIERA ASTURIANA S.A. E.F.C. (11/24/2021)

Consent, Lawfulness of Processing

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/19/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. (10/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-VODAFONE SERVICIOS, S.L.U. (10/26/2021)

Consent, Lawfulness of Processing

Norwegian Supervisory Authority (Datatilsynet)-Ultra-Technology AS (9/21/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-ORANGE ESPAGNE, S.A.U. (10/8/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-MAF.COM ESQUI CLUB (10/11/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Sky Italia S.r.l. (9/16/2021)

Consent, Lawfulness of Processing, Principles

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (9/14/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Bar owner (9/28/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gas inspector (7/30/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (8/3/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-PRA Iberia S.L. (7/27/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Body Tonic Shop S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Gerco Fit S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vasco Andaluza de Inversiones S.L. (7/27/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/2/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Unknown (7/1/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Private Individual (7/1/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Iren Mercato S.p.A. (5/13/2021)

Consent, Lawfulness of Processing, Principles

Icelandic data protection authority (‘Persónuvernd’)-Huppuís ehf (6/15/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Master Distancia S.A. (6/7/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-OneDirect Srl (3/25/2021)

Consent, Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (5/14/2021)

Consent, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Highcliffe Estates Marbella S.L. (4/20/2021)

Consent, Lawfulness of Processing

Czech Data Protection Auhtority (UOOU)-Public university (7/12/1905)

Consent, Data Subjects Rights, Lawfulness of Processing

Czech Data Protection Auhtority (UOOU)-Ski rental company (7/12/1905)

Consent, Controllers and Processors, Data minimisation, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (4/13/2021)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Cultural association (3/15/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/16/2021)

Consent, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Fastweb S.p.A. (3/25/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Cypriot Data Protection Commissioner-Electricity Authority of Cyprus (3/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Filigrana Comunicación S.L.U. (3/10/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-NBQ Technology, S.A.U. (3/12/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Certime S.A. (3/15/2021)

Principles, Purpose limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) (12/10/2020)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Data State Inspectorate (DSI)-Lursoft IT SIA (2/9/2021)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Unknown (1/12/2021)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (1/21/2021)

Consent, Lawfulness of Processing

Belgian Data Protection Authority (APD)-Family Service / N.D.P.K. nv. (1/27/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (1/4/2021)

Consent, Data Subjects Rights, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Online Services (12/15/2020)

Consent, Controllers and Processors, Data Protection Officer (DPO), Data Subjects Rights, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Principles, Purpose limitation, Sensitive Data

Spanish Data Protection Authority (aepd)-Servicio de Alojamientos Responsables, S.L. (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA) (12/2/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (12/9/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Borjamotor, S.A. (12/10/2020)

Consent, Lawfulness of Processing

Spanish Data Protection Authority (aepd)-Iweb Internet Learning, S.L. (9/22/2020)

Consent, Data Subjects Rights, Lawfulness of Processing

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/12/2020)

Consent, Lawfulness of Processing, Principles

Spanish Data Protection Authority (aepd)-Party of the Socialists of Catalonia (8/17/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bankia S.A. (8/28/2020)

Principles, Purpose limitation

Italian Data Protection Authority (Garante)-Cavauto S.R.L. (8/10/2020)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-Utility Company (1/6/2020)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Telecommunication service provide (9/3/2019)

Consent, Data Subjects Rights, Lawfulness of Processing

Commission for Personal Data Protection (KZLD)-Commercial representative of telecommunication service provider (9/3/2019)

Consent, Lawfulness of Processing

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (7/11/1905)

Consent, Lawfulness of Processing

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Town of Kerepes (10/1/2019)

Consent, Lawfulness of Processing

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-PWC Business Solutions (7/30/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Data Protection Commision of Bulgaria (KZLD)-Medical centers (4/8/2019)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Austrian Data Protection Authority (dsb)-Private person (12/20/2018)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

“The Landscape of Consent Management Tools – A Data Altruism Perspective” by EU Commission

Consent, Lawfulness of Processing

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Cyber Threat Modelling for Risk Assessment by CSB

Risk Management, Technical and Organisational Measures (TOMs)

Chief Information Security Officer_ HANDBOOK

Risk Management

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Reprimand issued by the UK ICO concerning infringements of Article 5(1)(a), Article 6(1)(a) and Article 7(1) UK GDPR

Consent, Cookies, Lawfulness of Processing, Liability and Remedies

NIST Special Publication NIST SP 800-221A_Information and Communications Technology (ICT) Risk Outcomes Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

Risk Management

Recommendations 02/2021 on the legal basis for the storage of credit card data for the sole purpose of facilitating further online transactions |EPDB

Consent, Lawfulness of Processing

Transparency and Consent Framework Policies by IAB Europe

Consent, Cookies, Lawfulness of Processing, Principles, Transparency

DRAFT RISK ASSESSMENT REGULATIONS FOR CALIFORNIA PRIVACY PROTECTION AGENCY

Risk Management

A Guide to Cookies and Compliance by DMA

Consent, Cookies, Lawfulness of Processing

Annex: A summary of the Transparency in Health and Social Care guidance impact assessment by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Transparency in health and social care by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Guidelines on submission of signals under the Whistleblowing directive by the Bulgarian CPDP

Whistleblowing

Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive by EDPB

Consent, Lawfulness of Processing

Child oriented approach to data processing by DPC Ireland

Children as data subjects, Data Subjects Rights

Bulgarian CPPD Newsletter

Children as data subjects, Controllers and Processors, Data Subjects Rights, Technical and Organisational Measures (TOMs)

C-61/19

Consent, Lawfulness of Processing

C-129/21

Consent, Data Subjects Rights, Lawfulness of Processing, Right to Erasure

C-102/20

Consent, Lawfulness of Processing

C-77/21

Principles, Purpose limitation

C-205/21

Consent, Criminal Convictions and Offences, Lawfulness of Processing, Principles

Recommendation 4: Seek parental consent for children under 15 by CNIL

Children as data subjects, Consent, Data Subjects Rights, Lawfulness of Processing

Recommendation 5: Promote parental controls that respect the child’s privacy and best interests by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 3: Support parents with digital education by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 2: Encourage children to exercise their rights by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 1: Regulate the capacity of children to act online by CNIL

Children as data subjects, Data Subjects Rights

Demonstration of a privacy-preserving age verification process by CNIL

Children as data subjects, Data Subjects Rights

Effective Cyber Risk Management: A best practice governance guide for digitally secure and resilient organisations by Governance Institute of Australia

Risk Management, Technical and Organisational Measures (TOMs)

Online age verification: balancing privacy and the protection of minors by CNIL

Children as data subjects, Data Subjects Rights

Online age verification: balancing privacy and the protection of minors by CNIL | French

Children as data subjects, Data Subjects Rights

Recommendation 7: Check the age of the child and parental consent while respecting the child’s privacy by CNIL

Children as data subjects, Data Subjects Rights

Recommendation 6: Strengthen the information and rights of children by design by CNIL

Children as data subjects, Data Subjects Rights

Decision by the Federal Administrative Court Austria W137 2252081-1/6E (german)

Consent, Lawfulness of Processing

Office of the Privacy Commissioner of Canada Sweep Report 2024

Consent, Cookies, Lawfulness of Processing

Consent Banner Report Overview of EU and national guidelines on dark patterns by NOYB

Consent, Lawfulness of Processing

Artificial Intelligence and Algorithms in Risk Assessment by the European Labour Authority

Risk Management

Case 2:24-cv-05140 by the attorney general of California

Consent, Controllers and Processors, Data Sharing, Lawfulness of Processing

Principles on Children & Online Gaming Adopted at the Nordic Data Protection Meeting in Oslo 30 May 2024

Children as data subjects, Data Subjects Rights

Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms by EDPB

Consent, Lawfulness of Processing

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse

Children as data subjects, Data Subjects Rights

DIRECTIVE (EU) 2019/1937 on the protection of persons who report breaches of Union law (Whistleblower Directive)

Whistleblowing

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Consent, Personal Data

Planet49 GmbH, C-673/17, Grand Chamber, 1 October 2019.

Consent, Cookies

Children and the GDPR | UK ICO

Children as data subjects

Guidelines on transparency under Regulation 2016/679

Transparency

Guidelines 05/2020 on consent under Regulation 2016/679

Consent, Lawfulness of Processing

Guidance on the rules on use of cookies and similar technologies [pdf] [Official Guidelines]

Consent, Cookies

Cookies Instructions Kit by DMA Italy, FedoWEB et al.

Consent, Cookies

Report of the work undertaken by the Cookie Banner Taskforce [Official EDPB Guidelines] [pdf]

Consent, Cookies

Administrative fine against Grindr LLC by The Norwegian Data Protection Authority

Consent, Lawfulness of Processing, Principles, Sensitive Data

Rules of Procedure by EDPB on the cooperation and respective roles of national SAs and the EDPB Secretariat regarding the submission of complaints in the redress mechanism available to EU individuals in relation to alleged violations of U.S law with respect to their data collected by U.S. authorities competent for national security

Adequacy Decisions, Data Transfers, Risk Management

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

A 10-step guide to sharing information to safeguard children by the UK ICO

Children as data subjects

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

Australian ACMA DoorDash Technologies Australia Pty Ltd

Consent, Liability and Remedies

Board of Directors Handbook for Cloud Risk Governance | Google

Risk Management

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

Sending direct marketing messages: At-a-glance guide (UK ICO)

Consent, Lawfulness of Processing

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management