Resources

GDPR in Practice – Experience of Data Protection Authorities by FRA

Supervisory Authorities

UK’s New Data Use Bill: Easier Access and Enhanced Privacy for All

Local Laws

Records Management Toolkit Tracker

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

Records Management Toolkit Tracker – more information about the Toolkit by UK ICO

Data Retention, Personal Data Collection, Records of processing Activities (ROPA)

C-340/21

Controllers and Processors, Liability and Remedies, Supervisory Authorities, Technical and Organisational Measures (TOMs)

Case ZWO 22/775, Overijssel District, Netherlands

Liability and Remedies, Supervisory Authorities

GDPR: a culture of non-compliance? Numbers of evidence-based enforcement efforts by nyob

Liability and Remedies, Supervisory Authorities

CASE STUDIES (2018 – 2023) by the Irish DPC

Access Requests (DSAR), Controllers and Processors, Data Breaches, Data Subjects Rights, Liability and Remedies, Supervisory Authorities

[PRESS RELEASE No 191/23] CJEU on the right to compensation for non-material damages based on the fear of possible misuse

Liability and Remedies, Supervisory Authorities

Press Release No 184-23 by the CJEU

Controllers and Processors, Joint Controllers, Liability and Remedies, Supervisory Authorities

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Liability and Remedies, Supervisory Authorities

Infographic DPC TikTok Fine

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Decision of the Data Protection Commission made pursuant to Section 111 of the DPA, 2018 and Articles 60 and 65 of the GDPR

Fairness, Liability and Remedies, Principles, Supervisory Authorities

Study on the national administrative rules impacting the cooperation duties for the national supervisory authorities

Supervisory Authorities

C-645/19

Supervisory Authorities

C-245/20

Supervisory Authorities

C-300/21

Liability and Remedies, Supervisory Authorities

Noyb Complaint Case: C-082-01 to EU Data protection Supervisor against EU Parliament

Controllers and Processors, Data Breaches, Public Administrative Body

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Noyb Complaint Case: C-082-02 to EU Data protection Supervisor against EU Parliament

Controllers and Processors, Data Breaches, Public Administrative Body

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

Data Protection Fining Guidelines by UK ICO

Liability and Remedies, Supervisory Authorities

Joint statement on data scraping and the protection of privacy

Personal Data Collection

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

Records of Processing Activities under Article 30 GDPR | Irish DPC

Records of processing Activities (ROPA)

WORKING PARTY 29 POSITION PAPER on the derogations from the obligation to maintain records of processing activities pursuant to Article 30(5) GDPR

Records of processing Activities (ROPA)

Decision of the Norwegian Data Protection Authority to adopt urgent and provisional measures against Meta (Facebook)

Liability and Remedies, Supervisory Authorities

Records of processing activities template by the CNIL

Records of processing Activities (ROPA)

Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Supervisory Authorities

Guidelines 8/2022 on identifying a controller or processor’s lead supervisory authority

Supervisory Authorities

Guidelines 02/2022 on the application of Article 60 GDPR

Supervisory Authorities

Telegram CEO’s Arrest Sparks Debate on Privacy vs. Regulation

Personal Data Collection, Technical and Organisational Measures (TOMs)

Salvatore Manni Case C 398/15

Data Retention, Legitimate Interest, Storage limitation

ANAF Case C‑201/14, 1 October 2015

Automated Decision-making, Data Sharing, Data Transfers, Public Administrative Body

GDPR Fines Tracker

Liability and Remedies, Supervisory Authorities