Resources

Decision 114/2024 by Belgian Data Protection Authority (in Dutch)

Consent, Employment

First Draft General-Purpose AI Code of Practice by EU Commission

Musk Adds Microsoft to OpenAI Lawsuit, Expanding Antitrust Allegations

New Data Broker Rules Approved by CPPA Board

Data Brokers

Senate Bill No. 362 (Delete Act)

Data Brokers

LAW DIVISION 6. CALIFORNIA PRIVACY PROTECTION AGENCY CHAPTER 3. Data Broker Registration

Data Brokers

GUIDE ON RESPONSIBLE USE OF BIOMETRIC DATA IN SECURITY APPLICATIONS BY Personal Data Protection Commission (PDPC) and Security Association Singapore (SAS)

Sensitive Data, Technical and Organisational Measures (TOMs)

AI tools in recruitment by UK ICO

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI Management Essentials by Department for Science, Innovation and Technology

UK to Regulate AI Frontier Models with New Legislation in 2025

Slovenian SA Decision 0603-42/2023/12 against Dodo Pizza

CCTV, Lawfulness of Processing, Legitimate Interest

AI and the audiovisual sector: navigating the current legal landscape by IRIS European Audiovisual Observatory

Harmonised Standards for the European AI Act by EU Commission

AI Principles and Best Practices for Developers and Employers by U.S. DEPARTMENT OF LABOR

Perplexity AI Faces Lawsuit Over Alleged Copyright Violations by Dow Jones and NY Post

AI Toolkit Tracker

Artificial Intelligence (AI) Toolkit Tracker – more information about the Toolkit by UK ICO

Dutch Supervisory Authority for Data Protection (AP)-Clearview AI Inc. (5/16/2024)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-National Prosecutor’s Office (9/2/2024)

Consent, Controllers and Processors, Data Breaches, Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (5/20/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Municipality of Nepi (6/20/2024)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda Sanitaria Locale TO4 (5/23/2024)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Istituto Nazionale di Previdenza Sociale (4/11/2024)

Principles, Representative

Lithuanian Data Protection Authority (VDAI)-Vinted (7/2/2024)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Eni Plenitude S.p.A. (6/6/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Professional association (5/23/2024)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Ustica (6/6/2024)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Medical association (5/9/2024)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-I.N.P.A.S. (4/24/2024)

Controllers and Processors, Lawfulness of Processing, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Committee (4/24/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda ospedale università di Padova (5/9/2024)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Cappello Giovanni & Figli s.r.l. (6/6/2024)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Olimpia S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Corint Logistic SRL. (5/30/2024)

Access Requests (DSAR), Data Subjects Rights, Lawfulness of Processing, Principles, Right to Object, Sensitive Data

Italian Data Protection Authority (Garante)-Centro Riparazioni Piacentino S.p.A. (3/7/2024)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Innova Camara (4/11/2024)

Principles, Sensitive Data, Storage limitation

Italian Data Protection Authority (Garante)-Facile.Energy S.r.l. (4/11/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Enel Energia SpA (2/8/2024)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Mas s.r.l. (4/13/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mas s.r.l.s. (4/13/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-AIO E-COMMERCE, S.L. (10/26/2022)

Data minimisation, Principles, Sensitive Data

Data Protection Authority of Brandenburg-Supermarket (7/15/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Camera di Commercio Industria Artigianato e Agricoltura (2/22/2024)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda socio-sanitaria locale n. 1 di Sassari (2/8/2024)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Municipality of Modica (7/18/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-SANITAS, S.A. DE SEGUROS (2/6/2024)

Lawfulness of Processing, Principles, Sensitive Data

Bulgarian Commission for Personal Data Protection (KZLD)-Unknown (2/9/2023)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Hamburg-Company (7/15/1905)

Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Medtronic Italia (2/8/2024)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Stjörnuna ehf (3/24/2024)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. (2/22/2024)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Belgian Data Protection Authority (APD)-Black Tiger Belgium (1/16/2024)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Istituto Comprensivo Statale “F.S. Cabrini (1/24/2024)

Lawfulness of Processing, Representative

Data Protection Authority of Baden-Wuerttemberg-Private individual (7/15/1905)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Municipality (1/24/2024)

Lawfulness of Processing, Principles, Representative, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners’ association (2/5/2024)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Account Exchange SRL (2/7/2024)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Disciplinary officer (4/20/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Limit Call S.r.l.s. (11/30/2023)

Accountability, Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Sirio S.p.A. (12/7/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-AMAZON FRANCE LOGISTIQUE (1/23/2024)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/7/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (12/21/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (12/30/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alior Bank SA (1/12/2024)

Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-TECHNINK LEB SRL (1/15/2024)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale nord Milano, C.F. (12/7/2023)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Sectorul 1 al Municipiului București (1/30/2024)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Homeowner administrator (10/26/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Lonato del Garda (11/16/2023)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Castel Goffredo (11/16/2023)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-RCS Mediagroup S.p.a. (6/8/2023)

Lawfulness of Processing, Principles, Sensitive Data

French Data Protection Authority (CNIL)-Company (12/22/2023)

Principles, Purpose limitation

Italian Data Protection Authority (Garante)-Region of Lombardy (10/26/2023)

Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale di Lodi CF (10/12/2023)

Lawfulness of Processing, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (11/16/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/30/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (12/15/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-QUALITY-PROVIDER S.A. (11/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Voorschoten municipality (11/2/2023)

Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Eurocollege Oxford English Institute S.L. (11/17/2023)

Controllers and Processors, Data minimisation, Principles, Representative, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Norwegian Labor and Welfare Administration (11/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

National Commission for Data Protection (CNPD)-Unknown (9/21/2023)

Data Subjects Rights, Principles, Purpose limitation, Sensitive Data

Austrian Data Protection Authority (dsb)-Phyisician (9/26/2023)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Scionti Selezioni Superiori S.r.l. (10/12/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Compara Facile S.r.l. (7/18/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Salvator Mundi International Hospital s.r.l (9/28/2023)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl Toscana centro (9/28/2023)

Controllers and Processors, Lawfulness of Processing, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ministero dell’Ambiente e della Sicurezza Energetica (9/28/2023)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Nimbus s.r.l. (9/14/2023)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Tiscali Italia SpA (7/18/2023)

Lawfulness of Processing, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Mednow Medical Center di Giugni Marco (8/31/2023)

Accuracy, Data Subjects Rights, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Mensajero SRL (10/24/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Università Telematica E-Campus (7/18/2023)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Spark Car Sharing SRL (10/25/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Physician (9/28/2023)

Lawfulness of Processing, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Debt collection company (10/5/2023)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-GFB One s.r.l. (9/14/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-San Severo municipality (9/14/2023)

Lawfulness of Processing, Representative

Cypriot Data Protection Commissioner-Cypriot Ministry of the Interior (7/15/1905)

Lawfulness of Processing, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Schockholm School borard (10/3/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Axpo Italia Spa (9/28/2023)

Accountability, Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Cypriot Data Protection Commissioner-Breikot Management Ltd (7/15/1905)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Private individual (7/18/2023)

Controllers and Processors, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-SAF LOGISTICS (9/18/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data minimisation, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-RESTART ENERGY ONE S.A. (9/26/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UAT Comuna Albeni (9/25/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-RCS Mediagroup Spa (8/31/2023)

Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA (9/25/2023)

Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Ovest Milanese (7/18/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Rinascente S.p.A. (6/8/2023)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Cat s.r.l. (7/18/2023)

Principles, Representative

Italian Data Protection Authority (Garante)-Ermeslink di Giovanni Di Stefano (7/18/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Company (1/25/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Azienda Tutela della Salute della Sardegna (6/7/2023)

Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Thin Srl (6/1/2023)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Ew Business Machines S.p.A. (6/1/2023)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Camedi s.r.l. (6/1/2023)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Usl Toscana Sud Est. (6/1/2023)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (5/31/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Authority of Ireland-Irish Departement of Health (6/16/2023)

Data minimisation, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Napoli (6/1/2023)

Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (6/2/2023)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Lithuanian Data Protection Authority (VDAI)-Company (4/20/2023)

Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Citynews S.p.A. (4/14/2023)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Company (6/21/2023)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Università degli studi di Cassino e del Lazio Meridionale (4/27/2023)

Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (6/12/2023)

Lawfulness of Processing, Principles, Privacy by Design, Representative

Italian Data Protection Authority (Garante)-Ufficio Scolastico Regionale per la Puglia, Ufficio VI – Ambito Territoriale di Lecce (4/27/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Cogollo del Cengio (4/13/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda socio sanitaria locale n. 3 di Nuoro (4/13/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/16/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-La Risorsa Umana.it s.r.l. (3/23/2023)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Benetton Group S.r.l. (4/27/2023)

Data minimisation, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Website operator (5/17/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data State Inspectorate (DSI)-Company (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Nordrhein-Westfalen-Physician (7/14/1905)

Controllers and Processors, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Municipality (5/5/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-Unknown (7/14/1905)

Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda ULSS 6 Euganea (5/17/2023)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Belgian Order of Pharmacists (6/16/2023)

Lawfulness of Processing, Sensitive Data

Data Protection Commissioner of Malta-Unknown (7/15/1905)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Roma Capitale (4/27/2023)

Lawfulness of Processing, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Farmacia Ardealul SRL (6/27/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Data Protection Authority of Berlin-Job center employee (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/14/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Private individual (4/27/2023)

Controllers and Processors, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-KG COM (6/8/2023)

Data minimisation, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-BRD-Groupe Société Générale S.A. (6/15/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Berlin-Private individual (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Restaurant operator (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Sports photography company (7/14/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-TIM S.p.A. (4/13/2023)

Accountability, Data Subjects Rights, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Compania Națională Poșta Română S.A. (5/16/2023)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A. (5/12/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-NN Asigurări de Viață S.A. (5/12/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-AUTOMOBILE BAVARIA SRL (5/18/2023)

Controllers and Processors, Principles, Privacy by Design, Sensitive Data, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Credit institution (7/14/1905)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Razmataz Live s.r.l.. (3/2/2023)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Consorzio Concessioni Reti Gas S.c.a.r.l. (3/9/2023)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-I&S Limited Kft (2/6/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Bulgarian Commission for Personal Data Protection (KZLD)-Bulgarian Post EAD (5/4/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Aesse S.r.l.s. (3/9/2023)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Private individual (3/2/2023)

Lawfulness of Processing, Representative

Polish National Personal Data Protection Office (UODO)-Company (2/8/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Hotel (12/21/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Storage limitation

Cypriot Data Protection Commissioner-Πολίτης newspaper (1/16/2023)

Controllers and Processors, Data minimisation, Principles, Representative

Spanish Data Protection Authority (aepd)-Burwebs S.L. (11/3/2022)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Coin dealer (9/12/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Brandenburg-Restaurant operator (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Brandenburg-Operator of a swimming pool (7/14/1905)

Lawfulness of Processing, Legal Obligation

Italian Data Protection Authority (Garante)-Azienda sanitaria locale di Bari (3/2/2023)

Lawfulness of Processing, Principles, Sensitive Data

Austrian Data Protection Authority (dsb)-Operator of a public toilet (8/23/2022)

Lawfulness of Processing, Legitimate Interest, Sensitive Data

Italian Data Protection Authority (Garante)-Ediscom S.p.a. (2/23/2023)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Misterbianco municipality (1/26/2023)

Principles, Representative

Italian Data Protection Authority (Garante)-Eurosanità S.P.A. (12/15/2022)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Real Federación Española de Tenis de Mesa (4/4/2023)

Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Vodafone (2/2/2023)

Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Piraeus Bank (2/2/2023)

Data Breaches, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Partidul Uniunea Salvați România (4/19/2023)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Hessen-Covid-19 test center (7/14/1905)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Hamburg-Private individual (7/14/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Covid-19 test center (7/14/1905)

Lawfulness of Processing, Legal Obligation

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-REGENCY COMPANY SRL (4/7/2023)

Lawfulness of Processing, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-TV2 Média Csoport Zrt. (9/26/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Ospedale-Università Padova (1/11/2023)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda socio-sanitaria locale n. 1 di Sassari (3/23/2023)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Alianța pentru Unirea Românilor (3/15/2023)

Controllers and Processors, Data minimisation, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Szczecin-Centrum District Court (1/19/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Attorney (2/27/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Ufficio Scolastico Regionale per la Lombardia, Ufficio IV – Ambito Territoriale di Brescia (1/11/2023)

Controllers and Processors, Principles, Representative, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private individual (3/27/2023)

Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Integral Collection SRL (3/6/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda ULSS n.5 Polesana (1/26/2023)

Integrity and confidentiality, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Tehnoplus Industry SRL (3/23/2023)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Ireland-Centric Health Ltd. (1/23/2023)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Amiu S.p.A. (4/28/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Protection Officer (DPO), Principles, Representative

Italian Data Protection Authority (Garante)-Veneto region (10/6/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Verizon Connect Italy S.p.A. (12/15/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Edison Energia S.p.A. (12/15/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Croatian Data Protection Authority (azop)-Telecommunications company (Unknown)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Finopro IFN SA (3/6/2023)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Comune di Monte Sant’Angelo (4/28/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Direzione Didattica Statale 1° Circolo-Eboli (4/28/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Mister Brick S.a.s. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

National Commission for Data Protection (CNPD)-Manager of a real estate co-ownership (12/13/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Company (8/23/2022)

Accuracy, Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Tecnomed Trento s.r.l. (4/7/2022)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Douglas Italia S.p.a. (10/20/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Italian Data Protection Authority (Garante)-Società Lombarda Sport s.r.l. (11/24/2022)

Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Sats ASA (2/6/2023)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Scuola Statale Secondaria di I^ grado ‘Bianco-Pascol’ (12/15/2022)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Sensitive Data

Polish National Personal Data Protection Office (UODO)-PIONIER (law firm) (11/30/2022)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Borgia (12/15/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Vicchio (12/15/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di Bracciano (12/15/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Private individual (11/24/2022)

Controllers and Processors, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari (11/24/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Istituto di Istruzione Superiore G. Renda di Polistena, Reggio Calabria (10/20/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Italian Archery Federation (FITARCO) (10/20/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Salento (10/20/2022)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Conservatorio di Musica S. Cecilia di Roma (11/10/2022)

Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Dentist (1/31/2023)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Occidentale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Friuli Centrale (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Universitaria Giuliano Isontina (12/15/2022)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Fondazione Teatro Regio di Torino (10/20/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Ospedaliero-Universitaria Careggi di Firenze (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Company in the hospitality industry (11/25/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Betting place (11/25/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Betting place (12/5/2022)

Representative

Croatian Data Protection Authority (azop)-Retailer (12/5/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/6/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/6/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/7/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Fish market (12/7/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Jewelry manufacturer (12/8/2022)

Controllers and Processors, Representative

Croatian Data Protection Authority (azop)-Retailer (12/8/2022)

Controllers and Processors, Representative

Italian Data Protection Authority (Garante)-Istituto Comprensivo – IC Cosenza III “V. Negroni” (9/21/2021)

Controllers and Processors, Principles, Representative, Sensitive Data

Deputy Data Protection Ombudsman-Company (12/27/2022)

Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Unknown (8/31/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Unknown (3/23/2022)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-A.R.N.A.S. Civico (12/1/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Praktiškas UAB (1/9/2023)

Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Thomas International Systems, S.A. (1/16/2023)

Principles, Sensitive Data

Data Protection Authority of Ireland-Meta Platforms Ireland Limited (1/4/2023)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Areti spa (11/24/2022)

Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Sportitalia (11/10/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Lazio Region (12/1/2022)

Lawfulness of Processing, Representative

Portuguese Data Protection Authority (CNPD)-Portuguese National Statistical Institute (11/2/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Viking Line Oy Abp (12/9/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-I.S.P.R.O. (10/20/2022)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Villafranca di Verona municipality (11/10/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Vodafone Italia S.p.A. (11/10/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Alpha Exploration (10/6/2022)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl Valle d’Aosta (11/10/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Spanish Data Protection Authority (aepd)-Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM (12/2/2022)

Data Subjects Rights, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Prestige Media PHG SRL (11/8/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Colosseo S.r.l. (8/5/2022)

Access Requests (DSAR), Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-AMPLIFON Hungary Trade and Service Provider LLC (8/11/2022)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative

Polish National Personal Data Protection Office (UODO)-Mayor (11/2/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-TECHPUMP SOLUTIONS S.L. (10/31/2022)

Consent, Lawfulness of Processing, Sensitive Data

Portuguese Data Protection Authority (CNPD)-Setúbal municipality (11/2/2022)

Principles, Sensitive Data, Storage limitation

Italian Data Protection Authority (Garante)-Clio S.r.l. (7/21/2022)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Ginosa municipality (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Acqua Novara.VCO S.p.a. (7/21/2022)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-BANCO BILBAO VIZCAYA ARGENTARIA, S.A. (10/31/2022)

Controllers and Processors, Principles, Purpose limitation, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Thiene municipality (9/15/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Intesa Sanpaolo Vita S.p.a. (7/7/2022)

Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-School (9/9/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Information Commissioner (ICO)-Easylife Ltd. (10/4/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Estonian Data Protection Authority (AKI)-Health care worker (8/17/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Liceo Statale ‘Edoardo Amaldi” (9/1/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (10/5/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Lazio Region (9/15/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Senseonics Inc. (7/7/2022)

Lawfulness of Processing, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (10/3/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Curtea Veche Publishing SRL (9/21/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Health insurance provider (9/25/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (8/8/2022)

Accountability, Consent, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Italian Data Protection Authority (Garante)-Auto Hi-Fi System S.n.c (7/28/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Austrian Data Protection Authority (dsb)-Private individual (7/13/1905)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Federazione Italiana Sommelier, Albergatori e Ristoratori (6/30/2022)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Hellenic Data Protection Authority (HDPA)-DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A. (7/19/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Cribis Credit Management s.r.l. (6/9/2022)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Ireland-Meta Platforms, Inc. (9/5/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Slovak Data Protection Office-Unknown (7/13/1905)

Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative

Information Commissioner of Isle of Man-Manx Care Ltd (7/13/2022)

Accountability, Controllers and Processors, Data minimisation, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Santa Ninfa municipality (4/29/2021)

Lawfulness of Processing, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-CDI Transport Intern și Internațional SRL (8/9/2022)

Data Subjects Rights, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Wabag Water Services SRL (8/9/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-LAST LAP, S.L. (8/1/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Policoro municipality (8/1/2022)

Accountability, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Synlab Med srl (5/13/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Territorial Administration of the Government of Genoa (9/29/2021)

Lawfulness of Processing, Sensitive Data

French Data Protection Authority (CNIL)-UBEEQO INTERNATIONAL (7/7/2022)

Data minimisation, Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Villabate municipality (5/12/2022)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Convitto Nazionale Statale ‘Giordano Bruno’ di Maddaloni (boarding school) (3/25/2021)

Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Region of Tuscany (5/26/2022)

Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Università Agraria di Nettuno (5/26/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Napoli Corpo di Polizia Municipale (5/22/2022)

Lawfulness of Processing, Representative

Data Protection Authority of Hamburg-Private individual (7/13/1905)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Afragola municipality (5/26/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda sanitaria universitaria Friuli Centrale (5/26/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda sanitaria universitaria Friuli Occidentale (5/26/2022)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Spanish Data Protection Authority (aepd)-Bar owner (7/19/2022)

Principles, Purpose limitation

Cypriot Data Protection Commissioner-Εκδοτικού Οίκου Δίας (2/4/2022)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Clearview Al Inc. (7/13/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Socio Sanitaria Territoriale Dei Sette Laghi (5/22/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-City of Rome (Roma capitale) (1/27/2021)

Lawfulness of Processing, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Stołeczny Ośrodek dla Osób Nietrzeźwych (5/31/2022)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda Sanitaria Locale Roma (5/26/2022)

Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Zito Auto di Gianfranco Zito (5/22/2022)

Lawfulness of Processing, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapest Bank Zrt. (2/8/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Intesa Sanpaolo S.p.A (5/26/2022)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Berlin-Attorney (7/13/1905)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Nos s.r.l.s. (4/28/2022)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-SCOTCH CORNER BAR (6/16/2022)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Partanna (4/28/2022)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Brandenburg-Physician (7/13/1905)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Il Sole 24 Ore S.p.a. (4/28/2022)

Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Ospedale San Raffaele s.r.l. (4/28/2022)

Integrity and confidentiality, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de Proprietari Aviației Park (6/20/2022)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Isabella Gonzaga’ high school (4/28/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Police officer (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Job center employee (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Berlin-Medical clinic (7/13/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hessen-Restaurant (7/13/1905)

Principles, Purpose limitation

Belgian Data Protection Authority (APD)-Roularta Media Group (5/25/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Storage limitation

Italian Data Protection Authority (Garante)-Italian Ministry of Defense (4/28/2022)

Controllers and Processors, Lawfulness of Processing, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Palumbo Superyacht Ancona s.r.l. (4/7/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Findomestic Banca spa (4/7/2022)

Lawfulness of Processing, Principles, Sensitive Data

Information Commissioner (ICO)-Clearview Al Inc. (5/18/2022)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Educationest s.r.l. (4/28/2022)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Istituto Nazionale Assicurazione Infortuni sul Lavoro (4/28/2022)

Lawfulness of Processing, Principles, Public Interests, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Kredyt Inkaso Investments RO S.A (5/18/2022)

Controllers and Processors, Data Breaches, Principles, Representative, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Workshop (3/29/2022)

Legitimate Interest, Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-MAYR MELNHOF PACKAGING ROMANIA S.R.L. (5/17/2022)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Mediterranean Hospital of Cyprus (9/17/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-CAFFE VECCHIO, S.L. (4/28/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Concordia Capital IFN S.A. (5/4/2022)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Lillestrøm Municipality (2/2/2022)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative

Icelandic data protection authority (‘Persónuvernd’)-City of Reykjavík (5/3/2022)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Belgian Data Protection Authority (APD)-Nationale Maatschappij der Belgische Spoorwegen (5/4/2022)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-ASST di Lodi (4/26/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda ospedaliera di Perugia (4/7/2022)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Belgian Data Protection Authority (APD)-Company (4/1/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Azienda sanitaria provinciale di Caltanissetta (3/10/2022)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Company (3/2/2022)

Accountability, Controllers and Processors, Data Subjects Rights, Principles, Representative

Dutch Supervisory Authority for Data Protection (AP)-Dutch Tax and Customs Administration (4/7/2022)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda USL Toscana Centro (3/10/2022)

Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Agenzia Regionale per la Tutela dell’Ambiente dell’Abruzzo (3/10/2022)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Bremen-BREBAU GmbH (3/3/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Hellenic Data Protection Authority (HDPA)-Employer (3/9/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Data Protection Authority of Sweden-Klarna Bank AB (3/28/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-Foreign language school (3/9/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Brussels Airport Zaventem (4/4/2022)

Data minimisation, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Ambuce Rescue Team (4/4/2022)

Controllers and Processors, Principles, Representative, Sensitive Data

Belgian Data Protection Authority (APD)-Brussels Airport Charleroi (4/4/2022)

Lawfulness of Processing, Legal Obligation, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Guidizzolo (2/10/2022)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-PIKA Sp. z o.o. (1/19/2022)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Property owners’ association (4/7/2022)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Icelandic data protection authority (‘Persónuvernd’)-Hörpu tónlistar- og ráðstefnuhúss ohf. (3/8/2022)

Controllers and Processors, Data minimisation, Principles, Representative

Italian Data Protection Authority (Garante)-Region of Tuscany (2/10/2022)

Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Civil law firm ‘Sabou, Burz & Cuc’ (2/22/2022)

Lawfulness of Processing, Sensitive Data

Croatian Data Protection Authority (azop)-Retail company (name not available at the moment) (3/8/2022)

Controllers and Processors, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Clearview Al Inc. (2/10/2022)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda socio sanitaria territoriale Melegnano e della Martesana (2/10/2022)

Integrity and confidentiality, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Pactum Poland Sp. z o.o. (12/1/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-A.S.L. Napoli 1 Centro (1/13/2022)

Principles, Representative

Italian Data Protection Authority (Garante)-Ubi Banca spa (12/16/2021)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-IAB Europe (2/2/2022)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-ASL Latina (12/17/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Representative, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/1/2022)

Controllers and Processors, Integrity and confidentiality, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Cosmote Mobile Telecommunications S.A. (1/27/2022)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-B&T S.p.A. (11/25/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Aimon Srl (11/25/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative, Right to Object

Data Protection Authority of Saarland-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-Police officer (7/12/1905)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Researcher (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Belgian Data Protection Authority (APD)-EU DisinfoLab (1/27/2022)

Consent, Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Enel Energia S.p.A (12/16/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda USL di Parma (12/2/2021)

Integrity and confidentiality, Principles, Sensitive Data

Deputy Data Protection Ombudsman-Motor insurance center (12/16/2021)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Corradi s.r.l. (12/16/2021)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Lawyer (12/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Grupex 2000 SRL (2/1/2022)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Warsaw University of Technology (12/9/2021)

Controllers and Processors, Integrity and confidentiality, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commissioner of Malta-C-Planet (IT Solutions) Limited (1/17/2022)

Integrity and confidentiality, Principles, Representative

Italian Data Protection Authority (Garante)-Società H San Raffaele Resnati s.r.l. (11/25/2021)

Integrity and confidentiality, Principles, Sensitive Data

Portuguese Data Protection Authority (CNPD)-Lisbon City Council (12/21/2021)

Lawfulness of Processing, Sensitive Data

Austrian Data Protection Authority (dsb)-Private individual (8/5/2021)

Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Telekom Romania Communications SA (12/6/2021)

Access Requests (DSAR), Accountability, Accuracy, Data Subjects Rights, Principles, Sensitive Data

Dutch Supervisory Authority for Data Protection (AP)-Dutch Minister of Finance (11/25/2021)

Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Norwegian State Pension Fund (SPK) (11/24/2021)

Consent, Data minimisation, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Grindr LLC (12/13/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-UAB Prime Leasing (11/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Physician (9/29/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Health Protection Agency of Sardinia (ATS) (10/14/2021)

Principles, Sensitive Data

French Data Protection Authority (CNIL)-Régie autonome des transports parisiens (11/4/2021)

Accountability, Controllers and Processors, Data minimisation, Principles, Representative, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Icelandic Ministry of Industry and Innovation (11/23/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Icelandic data protection authority (‘Persónuvernd’)-YAY ehf. (11/23/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (10/26/2021)

Principles, Purpose limitation

Italian Data Protection Authority (Garante)-Comune di Montalbano Jonico (9/16/2021)

Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-CLUB DEPORTIVO SANSUEÑA, S.L. (10/5/2021)

Controllers and Processors, Principles, Representative, Storage limitation, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-La Prima S.r.l. (9/16/2021)

Controllers and Processors, Principles, Privacy by Design, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Glove Technology SRL (10/21/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Ciechi Ardizzone Gioeni di Catania (9/16/2021)

Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Bocconi University (9/16/2021)

Lawfulness of Processing, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Ferde AS (9/27/2021)

Controllers and Processors, Data Processing Agreement (DPA), Integrity and confidentiality, Principles, Representative

Hellenic Data Protection Authority (HDPA)-NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε. (8/26/2021)

Accountability, Consent, Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Bar owner (9/28/2021)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Furnishyourspace S.L. (8/30/2021)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Flowbird Italia s.r.l. (7/22/2021)

Principles, Representative

Italian Data Protection Authority (Garante)-Atac s.p.a. (7/22/2021)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Regione Lombardia (7/22/2021)

Lawfulness of Processing, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Waxing Palace AS (8/12/2021)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Magyar Telekom Nyrt. (6/18/2021)

Accuracy, Controllers and Processors, Data Subjects Rights, Principles, Representative

Deputy Data Protection Ombudsman-Higher Education Institution (7/5/2021)

Data minimisation, Principles, Representative

Spanish Data Protection Authority (aepd)-INSTAPACK, S.L. (7/27/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Private Individual (7/30/2021)

Consent, Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Deliveroo Italy s.r.l. (7/22/2021)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Private Individual (7/27/2021)

Data minimisation, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Mercadona S.A. (7/26/2021)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl della Romagna (5/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Provinciale per i Servizi Sanitari di Trento (5/27/2021)

Lawfulness of Processing, Principles, Sensitive Data

Danish Data Protection Authority (Datatilsynet)-Nordbornholms Byggeforretning Aps (7/7/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Foodinho s.r.l. (6/10/2021)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Bolzano (5/13/2021)

Lawfulness of Processing, Principles, Sensitive Data

National Commission for Data Protection (CNPD)-Unknown (6/11/2021)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Dentist (6/10/2021)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-PNP S.A. (4/27/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-La Santrade S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-Funeda Sp. z o.o. (3/19/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Norwegian Supervisory Authority (Datatilsynet)-Unknown (6/22/2021)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Directorate of the Östra Skaraborg Rescue Service (6/9/2021)

Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Hellenic Data Protection Authority (HDPA)-PURPLE SEA MΟΝΟΠΡΟΣΩΠΗ ΙΚΕ (6/3/2021)

Accountability, Lawfulness of Processing, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-UAB VS FITNESS (6/21/2021)

Lawfulness of Processing, Principles, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Storstockholms Lokaltrafik (6/21/2021)

Data Subjects Rights, Lawfulness of Processing, Legitimate Interest, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Moss municipality (6/4/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-Huppuís ehf (6/15/2021)

Consent, Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Dreamtime Call S.R.L. (6/9/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Fondazione Policlinico Tor Vergata di Roma (4/21/2021)

Data Subjects Rights, Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

National Commission for Data Protection (CNPD)-Unknown (5/12/2021)

Data minimisation, Principles, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-MedHelp AB (6/7/2021)

Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Municipality of Oslo (5/20/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Innovasjon Norge (5/18/2021)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Municipal Organization for Pre-School Education and Social Solidarity (DOPAKA) of the municipality of Tavros Moschato (5/17/2021)

Legal Obligation

Italian Data Protection Authority (Garante)-Società triveneta di chirurgia (4/15/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Physician (4/15/2021)

Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Owners Association of Iasi Municipality (5/19/2021)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Banca Comercială Română S.A. (5/19/2021)

Lawfulness of Processing, Sensitive Data

Dutch Supervisory Authority for Data Protection (AP)-CP&A (3/24/2020)

Data Subjects Rights, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Planet Group Spa (3/11/2021)

Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Locatefamily.com (12/20/2020)

Controllers and Processors, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest) (3/24/2021)

Controllers and Processors, Data Breaches, Sensitive Data, Technical and Organisational Measures (TOMs)

Icelandic data protection authority (‘Persónuvernd’)-InfoMentor ehf (4/29/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Comune di Castellanza (3/25/2021)

Lawfulness of Processing, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Website operator (5/14/2021)

Consent, Lawfulness of Processing, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Operator of a care facility (3/25/2021)

Lawfulness of Processing, Sensitive Data

Hellenic Data Protection Authority (HDPA)-A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ (5/12/2021)

Access Requests (DSAR), Data Subjects Rights, Lawfulness of Processing, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Basaren Drift AS (3/21/2021)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Municipality (7/12/1905)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (7/12/1905)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Dutch Supervisory Authority for Data Protection (AP)-Municipality of Enschede (3/11/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Mediacom s.r.l. (3/11/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Comune di San Marco in Lamis (3/11/2021)

Lawfulness of Processing, Sensitive Data

Spanish Data Protection Authority (aepd)-Equifax Iberica S.L. (4/23/2021)

Lawfulness of Processing, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Asker Municipality (3/15/2021)

Controllers and Processors, Lawfulness of Processing, Performance of Contract, Principles, Representative, Technical and Organisational Measures (TOMs)

Norwegian Supervisory Authority (Datatilsynet)-Miljø- og Kvalitetsledelse AS (4/9/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Czech Data Protection Auhtority (UOOU)-Mall.tv (7/12/1905)

Controllers and Processors, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Ski rental company (7/12/1905)

Consent, Controllers and Processors, Data minimisation, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Ιγνατιάδης Νικόλαος και ΣΙΑ Ε.Ε. (4/7/2020)

Controllers and Processors, Data minimisation, Principles, Representative

Czech Data Protection Auhtority (UOOU)-Unknown (5/26/2020)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Istituti ospedalieri bergamaschi (2/11/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda Ospedaliera Universitaria Careggi (2/25/2021)

Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. Tip Top Food Industry S.R.L (4/15/2021)

Accountability, Lawfulness of Processing, Principles, Purpose limitation, Sensitive Data

Belgian Data Protection Authority (APD)-School (3/15/2021)

Controllers and Processors, Data minimisation, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Dragefossen AS (3/8/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Roma Capitale (2/11/2021)

Controllers and Processors, Data Processing Agreement (DPA), Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Ministero dell’Istruzione, Ufficio Scolastico Regionale per il Lazio (2/25/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Fastweb S.p.A. (3/25/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Conflenti (2/25/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Commezzadura (2/25/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Fondazione di religione e di culto “Casa sollievo della sofferenza” Opera di San Pio da Pietrelcina (2/11/2021)

Lawfulness of Processing, Principles, Sensitive Data

Polish National Personal Data Protection Office (UODO)-Anwara Sp. z.o.o. (1/15/2021)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Cypriot Data Protection Commissioner-Electricity Authority of Cyprus (3/3/2021)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Santo Stefano Belbo (12/17/2020)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Luino (12/17/2020)

Lawfulness of Processing, Sensitive Data

Italian Data Protection Authority (Garante)-Istituto Nazionale Previdenza Sociale (INPS) (2/25/2021)

Lawfulness of Processing, Principles, Privacy by Design, Sensitive Data

Italian Data Protection Authority (Garante)-Ministero dello Sviluppo Economico (2/11/2021)

Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Certime S.A. (3/15/2021)

Principles, Purpose limitation

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Controllers and Processors, Data minimisation, Data Subjects Rights, Principles, Representative, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Unknown (3/2/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria di Parma (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Usl di Bologna (1/14/2021)

Integrity and confidentiality, Principles, Sensitive Data

Croatian Data Protection Authority (azop)-Security company (name not available at the moment) (2/22/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) (12/10/2020)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Lithuanian Data Protection Authority (VDAI)-Registrų Centras (3/2/2021)

Controllers and Processors, Principles, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-I-DE Redes Eléctricas Inteligentes, S.A.U (3/2/2021)

Performance of Contract, Principles, Purpose limitation, Sensitive Data

Cypriot Data Protection Commissioner-Hellenic Bank (3/3/2021)

Controllers and Processors, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (2/12/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda sanitaria provinciale di Enna (1/14/2021)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Data Protection Authority of Ireland-University College Dublin (12/17/2020)

Controllers and Processors, Data Breaches, Principles, Sensitive Data, Storage limitation, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-Azienda USL della Romagna (1/27/2021)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Azienda Ospedaliero Universitaria Senese (1/27/2021)

Integrity and confidentiality, Principles, Sensitive Data

Norwegian Supervisory Authority (Datatilsynet)-Unknown (1/12/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Coop Finnmark SA (1/14/2021)

Controllers and Processors, Lawfulness of Processing, Representative

Norwegian Supervisory Authority (Datatilsynet)-Aquateknikk AS (1/19/2021)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Family Service / N.D.P.K. nv. (1/27/2021)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Smart Cities Sp. z o.o. (12/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Norwegian Supervisory Authority (Datatilsynet)-Cyberbook AS (2/3/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Miropass S.r.l. (12/17/2020)

Lawfulness of Processing, Principles, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-ING Bank N.V. Amsterdam – Bucharest office (12/30/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Innovasjon Norge (1/4/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Lindstrand Trading AS (1/6/2021)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Gveik AS (1/7/2021)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Apotheka e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Südameapteegi e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Azeta.ee e-apteek (12/1/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Niedersachsen-notebooksbilliger.de (1/8/2021)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Concentrix Cvg Italy s.r.l. (11/26/2020)

Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (1/4/2021)

Accuracy, Principles, Sensitive Data

French Data Protection Authority (CNIL)-Perfomeclic (12/7/2020)

Data minimisation, Data Subjects Rights, Principles, Right to Object, Sensitive Data

Polish National Personal Data Protection Office (UODO)-L. Sp. z o.o. (11/1/2019)

Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Gaypa s.r.l. (10/29/2020)

Data Subjects Rights, Lawfulness of Processing, Sensitive Data

Data State Inspectorate (DSI)-Unknown (12/15/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (12/16/2020)

Principles, Purpose limitation, Sensitive Data

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-S.C. C&V Water Control S.A. (12/22/2020)

Administratives Measures, Liability and Remedies, Principles, Sensitive Data

Austrian Data Protection Authority (dsb)-Private Individual (10/19/2020)

Controllers and Processors, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Unknown (11/13/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Austrian Data Protection Authority (dsb)-Private Individual (10/19/2020)

Lawfulness of Processing, Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/11/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/16/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Gnosjö Municipality (11/25/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Provincial Health Authority of Cosenza (11/17/2020)

Principles, Sensitive Data

Cypriot Data Protection Commissioner-Grant Ideas Ltd (10/19/2020)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Bank of Cyprus Public Company Ltd (10/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Integrity and confidentiality, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Avata Hispania, S.L. (10/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Callesgarcia, S.L. (10/6/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Casaloldo (9/3/2020)

Controllers and Processors, Principles, Representative

Lithuanian Data Protection Authority (VDAI)-Vilnius City Municipality Administration (10/21/2020)

Accuracy, Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/28/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefonica Moviles Espana, S.A.U. (11/5/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (11/19/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Università Campus Bio-medico di Roma (Polyclinic) (10/26/2020)

Accountability, Principles, Sensitive Data

Belgian Data Protection Authority (APD)-Former mayor of a community (9/7/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-GLP Instalaciones 86, SL (9/22/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Hamburg-H&M Hennes & Mauritz Online Shop A.B. & Co. KG (10/1/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Azienda Ospedaliera di Rilievo Nazionale ‘Antonio Cardarelli’ (Private Hospital) (9/30/2020)

Controllers and Processors, Data Processing Agreement (DPA), Data Subjects Rights, Lawfulness of Processing, Representative

Italian Data Protection Authority (Garante)-Scanshare s.r.l. (9/30/2020)

Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (9/25/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Entrepreneur running a non-public nursery and pre-school (6/3/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Lycamobile (10/6/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Megareduceri TV S.R.L. (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Asociația de proprietari Militari R (10/1/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Venu Sanz Chef, S.L. (9/30/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Odin Flissenter AS (9/25/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Private Person (10/9/2020)

Controllers and Processors, Data minimisation, Principles, Representative

Spanish Data Protection Authority (aepd)-Centro de Investigación y Estudio para la Obesidad, SL (10/9/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Office for geodesy and cartography (7/15/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Spanish Data Protection Authority (aepd)-Vodafone España SAU (7/31/2020)

Controllers and Processors, Principles, Representative

Estonian Data Protection Authority (AKI)-Police Officer (8/17/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Basketball Federation of Castilla and Leon (8/28/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Surveyor General of Poland (‘GKK’) (8/31/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (9/1/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Forbes Hungary (7/23/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Apartment building owners association (9/1/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (9/17/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Political Party (9/11/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Party of the Socialists of Catalonia (8/17/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Bankia S.A. (8/28/2020)

Principles, Purpose limitation

Spanish Data Protection Authority (aepd)-Vodafone España, SAU (8/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Cavauto S.R.L. (8/10/2020)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Baronissi (8/10/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Acc Consulting Varsinais-Suomi (8/5/2020)

Controllers and Processors, Principles, Representative

Austrian Data Protection Authority (dsb)-Bank (8/5/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-School (8/5/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Mapei S.p.A. (8/4/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Italian Data Protection Authority (Garante)-Supermarket (8/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Manduria (7/30/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of San Giorgio Jonico (7/29/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Region of Campania (7/29/2020)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Communal political association (7/28/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Google Belgium SA (7/14/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria, SA (7/20/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Orange Espagne S.A.U. (7/20/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-El Periódico de Catalunya, S.L.U. (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Telefónica Móviles España, SAU (7/23/2020)

Controllers and Processors, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Aquateknikk AS (6/19/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-National Police Brigade (6/19/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Comune di Colledara (1/30/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-San Giorgio Jonico (3/5/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Odin Flissenter AS (7/2/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (7/2/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Polish National Personal Data Protection Office (UODO)-East Power Sp. z o.o. (7/10/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Italian Data Protection Authority (Garante)-Merlini s.r.l. (7/13/2020)

Consent, Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Principles, Representative

Italian Data Protection Authority (Garante)-Wind Tre S.p.A. (7/13/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Centro Internacional De Crecimiento Laboral Y Profesional S.L. (7/10/2020)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Bank (3/26/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Baden-Wuerttemberg-Allgemeine Ortskrankenkasse (‘AOK’) (health insurance company) (6/30/2020)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Spanish Data Protection Authority (aepd)-Miraclia (telecommunications company) (6/23/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Comunidad de propietarios demelza beach (6/22/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Café Bar (6/16/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Housing Association (6/16/2020)

Controllers and Processors, Principles, Representative

Belgian Data Protection Authority (APD)-Unknown (6/19/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Belgian Data Protection Authority (APD)-Municipal employee (6/8/2020)

Controllers and Processors, Principles, Representative

Danish Data Protection Authority (Datatilsynet)-Lejre Municipality (6/30/2020)

Controllers and Processors, Data Breaches, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Digi Távközlési Szolgáltató Kft. (‘Digi’) (electronic communication service provider) (6/12/2020)

Controllers and Processors, Principles, Purpose limitation, Technical and Organisational Measures (TOMs)

Deputy Data Protection Ombudsman-Unknown Company (5/22/2020)

Controllers and Processors, Principles, Representative

Deputy Data Protection Ombudsman-Taksi Helsinki (5/29/2020)

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Creditor (3/9/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. (6/9/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Estee Lauder Romania (4/23/2020)

Controllers and Processors, Data Protection Officer (DPO), Lawfulness of Processing, Principles, Sensitive Data

Italian Data Protection Authority (Garante)-Comune di Urago (2/13/2020)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-Vis Consulting Sp. z o.o. (3/9/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Representative

Belgian Data Protection Authority (APD)-Proximus SA (4/28/2020)

Controllers and Processors, Cooperation with Supervisory Authorithy, Data Protection Officer (DPO), Representative

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Health and Medical Board of the Region of Örebro County (5/12/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Ireland-Tusla Child and Family Agency (5/17/2020)

Controllers and Processors, Principles, Representative

Dutch Supervisory Authority for Data Protection (AP)-Unknown Organisation (4/30/2020)

Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Private Person (3/16/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Oliveros Ustrell, S.L. (3/19/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-RTI – Reti Televisive Italiane s.p.a. (2/6/2020)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Speech and Special Education Centre – Mihou Dimitra (3/20/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Claim management company (6/3/2019)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (6/26/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Financial Enterprise (6/26/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Budapest Environs Regional Court (7/17/2019)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Public area maintenance company (8/2/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (10/15/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Representative of a local government (3/4/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (3/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Liceo Artistico Statale di Napoli (3/6/2020)

Controllers and Processors, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Liceo Scientifico Nobel di Torre del Greco (3/6/2020)

Controllers and Processors, Principles, Representative, Sensitive Data

Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)-Google LLC (3/11/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative

Norwegian Supervisory Authority (Datatilsynet)-Coop Finnmark SA (2/28/2020)

Controllers and Processors, Principles, Representative

Data Protection Authority of Nordrhein-Westfalen-Private person (YouTube-Channel) (8/5/2019)

Controllers and Processors, Principles, Representative

Polish National Personal Data Protection Office (UODO)-School in Gdansk (Danzig) (fine imposed against town of Gdansk) (3/4/2020)

Principles, Sensitive Data

Spanish Data Protection Authority (aepd)-Cafetería Nagasaki (2/4/2020)

Controllers and Processors, Principles, Representative

Italian Data Protection Authority (Garante)-Community of Francavilla Fontana (1/15/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/27/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-HM Hospitales (2/25/2020)

Controllers and Processors, Principles, Representative

Dutch Supervisory Authority for Data Protection (AP)-Royal Dutch Tennis Association (‘KNLTB’) (3/3/2020)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Entirely Shipping & Trading S.R.L. (12/13/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Principles, Representative, Sensitive Data

Italian Data Protection Authority (Garante)-Eni Gas e Luce (12/11/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Italian Data Protection Authority (Garante)-Eni Gas e Luce (12/11/2019)

Controllers and Processors, Principles, Representative

Hellenic Data Protection Authority (HDPA)-Aegean Marine Petroleum Network Inc. (12/19/2019)

Controllers and Processors, Principles, Representative, Technical and Organisational Measures (TOMs)

Italian Data Protection Authority (Garante)-TIM (telecommunications operator) (1/15/2020)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Banco Bilbao Vizcaya Argentaria S.L. (2/3/2020)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Right to Object

Spanish Data Protection Authority (aepd)-Queseria Artesenal Ameco S.L. (2/3/2020)

Controllers and Processors, Principles, Representative

Spanish Data Protection Authority (aepd)-Automoción (2/3/2020)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Commission for Personal Data Protection (KZLD)-The Ministry of Interior Affairs (10/8/2019)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-SC Enel Energie S.A. (Electricity Distributor) (12/16/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative, Right to Object

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Cypriot Data Protection Commissioner-LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd (10/25/2019)

Lawfulness of Processing, Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown Company (12/11/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative, Technical and Organisational Measures (TOMs)

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Royal President S.R.L. (11/29/2019)

Access Requests (DSAR), Controllers and Processors, Data Subjects Rights, Representative, Technical and Organisational Measures (TOMs)

Data Protection Commision of Bulgaria (KZLD)-National Revenue Agency (9/3/2019)

Consent, Controllers and Processors, Lawfulness of Processing, Representative

French Data Protection Authority (CNIL)-Futura Internationale (11/21/2019)

Controllers and Processors, Data Subjects Rights, Principles, Representative

Spanish Data Protection Authority (aepd)-Restaurant (SANTI 3000, S.L.) (Unknown)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vueling Airlines (10/1/2019)

Controllers and Processors, Principles, Representative

Cypriot Data Protection Commissioner-Doctor (7/11/1905)

Controllers and Processors, Principles, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-Inteligo Media SA (9/26/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Slovak Data Protection Office-Unknown (Unknown)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Xfera Moviles S.A. (10/16/2019)

Controllers and Processors, Principles, Representative

Austrian Data Protection Authority (dsb)-Austrian Post (10/29/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Spanish Data Protection Authority (aepd)-Vodafone España, S.A.U. (10/25/2019)

Controllers and Processors, Principles, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Organizer of SZIGET festival and VOLT festival (5/23/2019)

Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Hellenic Data Protection Authority (HDPA)-PWC Business Solutions (7/30/2019)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Principles, Representative

Data Protection Authority of Sweden-School in Skellefteå (8/20/2019)

Controllers and Processors, Data minimisation, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unknown (4/17/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Data Protection Commision of Bulgaria (KZLD)-A.P. EOOD (3/26/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)-UNICREDIT BANK SA (6/27/2019)

Controllers and Processors, Principles, Privacy by Design, Representative

Data Protection Commision of Bulgaria (KZLD)-Medical centers (4/8/2019)

Consent, Lawfulness of Processing, Principles, Sensitive Data

Danish Data Protection Authority (Datatilsynet)-IDdesign A / S (2/12/2021)

Controllers and Processors, Principles, Representative, Storage limitation

Data Protection Authority of Sachsen-Anhalt-Private person (2/5/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Debt collector (2/20/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Mayor’s Office of the city of Kecdkemét (2/28/2019)

Controllers and Processors, Lawfulness of Processing, Representative

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)-Unnamed financial institution (3/4/2019)

Controllers and Processors, Data Subjects Rights, Principles, Purpose limitation, Representative, Right to Erasure

Austrian Data Protection Authority (dsb)-Private car owner (9/27/2018)

Controllers and Processors, Lawfulness of Processing, Representative

Austrian Data Protection Authority (dsb)-Private person (12/20/2018)

Consent, Controllers and Processors, Data Subjects Rights, Lawfulness of Processing, Representative

Belgian Data Protection Authority (APD)-Mayor (5/28/2019)

Controllers and Processors, Principles, Purpose limitation, Representative

Bulgarian Commission for Personal Data Protection (KZLD)-Bank (12/4/2018)

Controllers and Processors, Principles, Purpose limitation, Representative

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg discussion paper on “Legal Foundations in Data Protection for the Use of AI”

AI, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Guidelines on Securing AI Systems by The Cyber Security Agency of Singapore (CSA)

AI, Risk Management, Specific processing situations

Japan AI Safety Institute’s “Guide to Red Teaming Methodology on AI Safety”

AI, Specific processing situations

Supreme Court of Singapore’s Circular on the Use of GenAI Tools in Court Documents

Data Processing by the Government, Specific processing situations

Study Finds ChatGPT Can Perform Biometric Tasks: A Closer Look at Privacy Risks

AI, Sensitive Data

Case C‑21/23 CJEU (full text in german)

Controllers and Processors, Data Breaches, Health Data, Lawfulness of Processing, Principles, Sensitive Data

Press Release No 159/24 on Judgment of the Court in Case C-21/23 CJEU

Controllers and Processors, Data Breaches, Health Data, Lawfulness of Processing, Principles, Sensitive Data

Recommendations for the use of AI coding assistants by ANSSI and BSI

AI, Specific processing situations

Case C‑621/22 CJEU

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

AIPact by the European Artificial Intelligence Office

AI, Data Subjects Rights, Specific processing situations

Manipulative, Deceptive, and Exploitative AI Systems report by the Dutch DPA

AI, Lawfulness of Processing, Specific processing situations

EDPS Model Administrative Arrangement

Data Processing by the Government, Data Transfers, Specific processing situations

FTC Targets Deceptive AI Claims with Operation AI Comply

AI, Lawfulness of Processing

OpenAI, Microsoft, and Amazon Join EU’s AI Pact to Shape Future Regulations

California Governor Vetoes AI Safety Bill

“AI & Algorithmic Risks Report” by Dutch Data Protection Authority

AI, Risk Management, Specific processing situations

National Strategy on AI by Sri Lanka

AI, Lawfulness of Processing, Specific processing situations

The Future of European Competitiveness by EU Commission

AI, New technology, Specific processing situations

Belgian DPA General Secretariat Artificial intelligence systems and the RGPD from a data protection perspective

AI, Lawfulness of Processing, Principles, Specific processing situations, Transparency

Recommendation on mobile applications or apps by the French DPA

Lawfulness of Processing, Specific processing situations

Tech Giants Sign Open Letter Urging “Regulatory Certainty on AI” in Europe

Genetic Testing Company 23andMe Pays $30M for Data Breach

Data Breaches, Sensitive Data

LinkedIn Used User Data for AI Training Before Updating Its Terms

AI, Data Sharing, Data Subjects Rights, Lawfulness of Processing

Artificial Intelligence and Machine Learning in Health Care and Medical Sciences Best Practices by Pitfalls Gyorgy J. Simon Constantin Aliferis Springer

AI, Health Data, Principles, Sensitive Data, Specific processing situations

Case C 203/22 on AI and automated decisions, the right of access under the GDPR, and the protection of trade secrets

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce by EDPB

AI, Specific processing situations

Statement 2/2024 on the financial data access and payments package by EDPB

Finance and Fintech

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures |EPDB

Specific processing situations, Surveillance

Case C‑740/22

Definitions, Personal Data

Case C‑604/22

Joint Controllers, Personal Data

Rethinking Privacy in the AI Era | White Paper by Stanford University

AI, Specific processing situations

Biometric Data Guidance by the UK ICO

Principles, Sensitive Data

A pro-innovation approach to AI regulation by UK ICO

AI, Specific processing situations

THE NEW STANDARD CONTRACTUAL CLAUSES – QUESTIONS AND ANSWERS

Data Transfers, Standard Contractual Clauses (SCC)

Datenschutzkonforme Künstliche Intelligenz Checkliste mit Prüfkriterien nach DS-GVO

AI, Specific processing situations

Analysis of the final compromise text of the EU AI Act with a view to agreement by the Belgian Presidency

AI, Specific processing situations

Recommendations 02/2020 on the European Essential Guarantees for surveillance measures

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

GUIDELINES CLOCKING AND ATTENDANCE CONTROL PROCESSING USING BIOMETRIC SYSTEMS BY THE AEPD

Employment, Principles, Sensitive Data, Specific processing situations

[PROPOSAL 2024] EU AI ACT

AI, Specific processing situations

Generative AI framework for HM Government by the UK Central Digital and Data Office

AI, Specific processing situations

Artificial Intelligence Strategy of the CJEU

AI, Specific processing situations

Information Commissioner’s Further Response to the Data Protection and Digital Information Bill (DPDI Bill)

Principles, Sensitive Data

Interim Report – Governing AI for Humanity by UN AI Advisory Body

AI, Specific processing situations

AI fairness in practice by the Alan Turing Institute

AI, Specific processing situations

Case T-1077/23

AI, Copyright, Specific processing situations

RISK FRAMEWORK FOR BODY-RELATED DATA IN IMMERSIVE TECHNOLOGIES BY FPF

Principles, Sensitive Data

Annex: A summary of the Transparency in Health and Social Care guidance impact assessment by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

Transparency in health and social care by the UK ICO

Controllers and Processors, Data Protection Impact Assessment (DPIA), Principles, Sensitive Data, Transparency

[DRAFT] FRAMEWORK CONVENTION ON ARTIFICIAL INTELLIGENCE, HUMAN RIGHTS, DEMOCRACY AND THE RULE OF LAW

AI, Specific processing situations

The NYT vs OpenAI and Microsoft

AI, Copyright, Specific processing situations

[Draft] Guidelines on the processing of personal data in regard to recruitment by the UK ICO

Automated Decision-making, Controllers and Processors, Data Protection Impact Assessment (DPIA), Employment, Specific processing situations

[Draft] Guidelines on the processing of personal data in regard to employment by the UK ICO

Employment, Specific processing situations

European Commision press release on AI Act Agreement

AI, Specific processing situations

New rules for Artificial Intelligence – Questions and Answers by the European Commision

AI, Specific processing situations

Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL LAYING DOWN HARMONISED RULES ON ARTIFICIAL INTELLIGENCE (ARTIFICIAL INTELLIGENCE ACT)

AI, Specific processing situations

Everything Recruiters Need to Know About GDPR by ZOHO

Employment, Specific processing situations

AI Act Provisional Agreement Press Release

AI, Specific processing situations

Guidelines issued by the Malta Gaming Authority for the Maltese Gaming Industry

Gaming, Specific processing situations

Opinion on processing of CCTV data in regard to employee performance analytics by the Bulgarian DPA

CCTV, Employment, Specific processing situations

PRACTICAL GUIDANCE FOR THE USE OF GENERATIVE ARTIFICIAL INTELLIGENCE IN THE PRACTICE OF LAW by State Bar of California

AI, Specific processing situations

Advancing Governance, Innovation, and Risk Management for Agency Use of Artificial Intelligence (PROPOSED MEMORANDUM )

AI, Specific processing situations

The impact of the General Data Protection Regulation (GDPR) on artificial intelligence by the EU Parliamnet

AI, Specific processing situations

Guidelines for secure AI system development by UK NCSC and US CISA

AI, Specific processing situations

Benefits and Risks of Generative Artificial Intelligence Report by the State of California

AI, Specific processing situations

GDPR guidance: Legitimate Inerersts Assessments (LIA) for Digital Advertising

Lawfulness of Processing, Legitimate Interest, Marketing and Advertising, Specific processing situations

Guidance on the Use of CCTV – For Data Controllers by the Irish DPC

CCTV, Specific processing situations

COMMON GUIDEPOSTS TO PROMOTE INTEROPERABILITY IN AI RISK MANAGEMENT | German Ministry of labor and social Affairs

AI, Specific processing situations

Generative AI: The Data Protection Implications by CEDPO

AI, Specific processing situations

Global Toolkit on AI and the Rule of Law for the Judiciary by UNESCO

AI, Specific processing situations

AI Privacy Policy template

AI, Specific processing situations

Protection of workers’ personal data: General principles by ILO

Employment, Specific processing situations

AI and Data Protection Risk Toolkit by UK ICO

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence by the US President

AI, Specific processing situations

Automated Decision-Making Under the GDPR by the FPF

AI, Automated Decision-making, Controllers and Processors, Specific processing situations

AI How-to Sheets by CNIL

AI, Specific processing situations

Description of the dataset template by CNIL

AI, Specific processing situations

Opinion 44/2023 on the Proposal for Artificial Intelligence Act in the light of legislative developments

AI, Specific processing situations

Artificial intelligence and the Information Privacy Principles by the Privacy Commisioner (New Zealand)

AI, Specific processing situations

Drones and Data Protection Guidelines by AEPD

Drones, Specific processing situations

Data protection and monitoring workers

Employment, Specific processing situations

Public Benefit and Privacy Panel for Health and Social Care (Guidance for applicants)

Health Data, Principles, Sensitive Data

How to use AI and personal data

AI, Specific processing situations

Government access to datain third countries

Data Processing by the Government, Specific processing situations

Case C-101/01

Data Transfers, Definitions, Principles, Processing of personal data, Sensitive Data

C-460/20

Data Subjects Rights, Right to Erasure, Search Engines, Specific processing situations

CASE OF BIG BROTHER WATCH AND OTHERS v. THE UNITED KINGDOM

National Security, Specific processing situations

Study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research

Material scope, Scientific Research, Specific processing situations

C-136/17

Data Subjects Rights, Principles, Right to Erasure, Search Engines, Sensitive Data, Specific processing situations

C-708/18

CCTV, Lawfulness of Processing, Legitimate Interest, Specific processing situations

Joined Cases C-511/18, C-512/18 and C-520/18

Criminal Convictions and Offences, National Security, Principles, Specific processing situations

C-34/21

Employment, Specific processing situations

C-184/20

Principles, Sensitive Data

C-77/21

Principles, Purpose limitation

C-252/21

Lawfulness of Processing, Performance of Contract, Principles, Sensitive Data

Voluntary AI Safety Standard by the Australian Government

AI, Specific processing situations

Safe and responsible AI in Australia Proposals paper for introducing mandatory guardrails for AI in high-risk settings by Australian Government

AI, Specific processing situations

Global Approaches to Auditing Artificial Intelligence by IPIE

AI, Specific processing situations

Artificial Intelligence Security Governance Framework 1.0 by China Cybersecurity Standardization Technical Committee

AI, Specific processing situations

Multidisciplinary Perspectives on Artificial Intelligence and the Law by Springer

AI, Specific processing situations

UNESCO: Consultation paper on AI Regulation

AI, Lawfulness of Processing, Public Interests, Specific processing situations

Saudi Data & Artificial Intelligence Authority: Rules governing the appointment of Personal DPOs under the Kingdom of Saudi Arabia’s (KSA) Personal Data Protection Law (PDPL)

AI, Specific processing situations

NSW report: Artificial intelligence in New South Wales

AI, Specific processing situations

Briefing EU Legislation in Progress by EPRS on AI Act

AI, Specific processing situations

GDPR in practice – Experiences of data protection authorities by FRA

Data Processing by the Government, Specific processing situations

ON THE ANTITRUST IMPLICATIONS OF EMBEDDING GENERATIVE AI IN CORE PLATFORM SERVICES BY SSRN

AI, Specific processing situations

South Africa National Artificial Intelligence Policy Framework

AI, Specific processing situations

Policy for the responsible use of AI in government by Australian Government

AI, Data Processing by the Government, Specific processing situations

Consumer Protection in respect of Use of Generative Artificial Intelligence by Hong Kong Monetary Authority

AI, Specific processing situations

The State of Artificial Intelligence in the Pacific Islands

AI, Specific processing situations

Proposal for a DIRECTIVE OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on adapting non-contractual civil liability rules to artificial intelligence (AI Liability Directive)

AI, Liability and Remedies, Specific processing situations, Supervisory Authorities

Securing Artificial Intelligence: Mitigation Strategy Report by ETSI

AI, Specific processing situations

Data protection compliant AI by Bavarian State Office for Data protection Supervision

AI, Specific processing situations

Responsible AI Governance in Africa: Prospects for Outcomes Based Regulation by African Observatory on Responsible AI

AI, Specific processing situations

Statement 3/2024 on data protection authorities’ role in the Artificial Intelligence Act framework by EDPB

AI, Specific processing situations

Confidential Computing and Privacy: Policy Implications of Trusted Execution Environments by Future of Privacy Forum

AI, Specific processing situations

Formal Opinion 512 on Generative Artificial Intelligence Tools by AMERICAN BAR ASSOCIATION

AI, Specific processing situations

Final State of Texas v Meta Order 2024

Facial Recognition, Specific processing situations

PRIVACY ENHANCING TECHNOLOGY (PET): PROPOSED GUIDE ON SYNTHETIC DATA GENERATION BY PDPC

Principles, Sensitive Data

National framework for the assurance of artificial intelligence in government by the Australian, state and territory governments

AI, Specific processing situations

Relying on the legal basis of legitimate interest to develop an AI system by CNIL

AI, Specific processing situations

Generative AI Controls Framework Safe, Secure, and Compliant AI Adoption Approach Whitepaper by IBM

AI, Specific processing situations

Patent Landscape Report on Generative AI by WIPO

AI, Specific processing situations

Discussion Paper: Large Language Models and Personal Data by The Hamburg Commissioner for Data protection and freedom of information

AI, Specific processing situations

Data protection impact assessment for AI Solutions by Danish DPA

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

Mobilizing the legal basis of legitimateinterest to develop an AI system by CNIL

AI, Specific processing situations

Case 4:23-cv-01110-P AHA v. Bacerra

Health Data, Principles, Sensitive Data

Orientations for ensuring data protection compliance when using Generative AI systems by EDPS

AI, Specific processing situations

GDPR & Generative AI A Guide for Customers by Microsoft

AI, Specific processing situations

Risk and control for artificial intelligence and machine learning systems by Cybernetica

AI, Specific processing situations

Governance of artificial intelligence (AI) by House of Commons UK

AI, Specific processing situations

DECISION OF THE INFORMATION COMMISSIONER Snap Inc. and Snap Group Limited

AI, Specific processing situations

Artificial intelligence (AI) and human rights: Using AI as a weapon of repression and its impact on human rights by EU Parliament

AI, Specific processing situations

Neurodata risks report by EDPS and Spanish DPA

AI, Specific processing situations

Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR by EDPB

Facial Recognition, Specific processing situations

GDPR in practice: Experience of data protection authorities by FRA

Data Processing by the Government, Specific processing situations

Exploring the ethical, technical and legal issues of voice assistants by CNIL

Call recordings

Orientation guide of the Conference of Independent Federal and State Data Protection Supervisory Authorities by the German Data Protection Conference (DSK)

AI, Specific processing situations

GDPR & GENERATIVE AI – A GUIDE FOR THE PUBLIC SECTOR BY MICROSOFT

AI, Specific processing situations

Convention on AI, Human Rights, Democracy and the Rule of Law – by the Council of Europe (draft)

AI, Specific processing situations

Report of the work undertaken by the ChatGPT Taskforce bg EDPB

A Guide to ICO Audit Artificial Intelligence (AI) Audits by UK ICO

AI, Specific processing situations

Guideline on the massive collection of personal data from the web for the training of generative artificial intelligence (GenAI) models by the Italian Data Protection Authority (Garante)

AI, Data scraping, Specific processing situations

Regulating targeted and behavioural advertising in digital services by EU Parliament

Marketing and Advertising, Specific processing situations

EDPB-EDPS Joint Opinion 5/2021 on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)

AI, Specific processing situations

Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR) |EDPB

Controllers and Processors, Data Transfers, Standard Contractual Clauses (SCC)

Generative Artificial Intelligence Risk Assessment by State of California Department of Technology

AI, Risk Management, Specific processing situations

Report and Recommendations of the New York State Bar Association Task Force on Artificial Intelligence

AI, Specific processing situations

Perspectives on Issues in AI Governance by Google

AI, Specific processing situations

Deploying AI Systems Securely by NSA

AI, Specific processing situations

REGULATION (EU) 2024/900 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 13 March 2024 on the transparency and targeting of political advertising

Marketing and Advertising, Specific processing situations

PRACTICE GUIDE SECURITY OF PERSONAL DATA Version 2024 by CNIL

Definitions, Personal Data

EDPB-EDPS Joint Opinion 1/2022 on the Proposal for a Regulation of the European Parliament and of the Council amending Regulation (EU) 2021/953 on a framework for the issuance, verification and acceptance of interoperable COVID-19 vaccination, test and recovery certificates (EU Digital COVID Certificate) to facilitate free movement during the COVID-19 pandemic |EPDB

Health Data, Principles, Sensitive Data

EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space

Health Data, Principles, Sensitive Data

Personal data breaches in the health sector: how to avoid them (and how to deal with them when they happen) by the UK ICO

Data Breaches, Health Data

How to deal with SARs as an employer by the UK ICO

Access Requests (DSAR), Employment

GenAI and data protection: how organisations and their employees can use it appropriately and lawfully

AI, Employment

Human rights Impact Assessments for AI by Access Now

AI, Data Protection Impact Assessment (DPIA)

Good FOI practice – a panel discussion by the UK ICO

Freedom of expression and information

Guidance Note: Employer Vehicle Tracking | Irish DPC

Employment

Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González [2014] Case C-131/12

Search Engines

CNIL and others v Google Case C 136/17

Search Engines, Specific processing situations

Nowak (C-434/16, EU:C:2017:994)

Personal Data

Patrick Breyer v. Germany Case C-582/14, 12 May 2016

Consent, Personal Data

Google v CNIL Case C 507/17

Search Engines

František Ryneš v. Úřad pro ochranu osobních údajů [2014] Case C-212/13, 11 December 2014

CCTV

Prokuratuur (Conditions of access to data relating to electronic communications) (C-746/18, EU:C:2021:152)

Law Enforcement, Local Laws

Data Protection and Journalism | UK ICO

Freedom of expression and information

What is Personal Data | UK ICO

Personal Data

Guidance on ai and data protection 2.0 | UK ICO

Joint Guide to ASEAN MCC and EU SCC

Data Transfers, Standard Contractual Clauses (SCC)

Guidance on Video Surveillance | UK ICO

CCTV

Artificial Intelligence Risk Management Framework (AI RMF 1.0) by NIST

Recommendations for companies planning to use Cloud computing services by CNIL

Cloud Services

Data Protection Code of Conduct for Cloud Infrastructure Service Providers

Cloud Services

Elaboration of the Code of Conduct for Cloud Infrastructure Service Providers (CNIL)

Cloud Services

Guidelines 3/2019 on processing of personal data through video devices

CCTV

Guidelines 04/2020 on the use of location data and contact tracing tools in the context of the COVID-19 outbreak

Health Data

Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak

Health Data

Guidelines 02/2021 on virtual voice assistants

Voice Assistants

Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications

Connected Vihicles

Australian Information Commissioner (OAIC): Corporate Plan for 2024-25

Data Processing by the Government, Specific processing situations

AI Meets Media: OpenAI Secures Another Multi-Year Deal with Media Giant

AI models collapse when trained on recursively generated data

AI, Specific processing situations

The government-wide vision on Generative Al of the Netherlands

AI, Data Processing by the Government, Specific processing situations

AI Possible Risks & Mitigations Optical Character Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI Possible Risks & Mitigations Named Entity Recognition by EDPB

AI, Controllers and Processors, Data Protection Impact Assessment (DPIA), Specific processing situations

AI system development: CNIL’srecommendations to comply with the GDPR

AI, Specific processing situations

Administrative fine against Grindr LLC by The Norwegian Data Protection Authority

Consent, Lawfulness of Processing, Principles, Sensitive Data

AI Auditing Checklist for AI Auditing by EDPB

AI, Specific processing situations

AI, DATA GOVERNANCE AND PRIVACY SYNERGIES AND AREAS OF INTERNATIONAL CO-OPERATION BY OECD

AI, Specific processing situations

Supervision of AI systems in the EU by Dutch DPA and RDI (english)

AI, Specific processing situations

Statement on the interplay between AI Act and GDPR for private sector by the The Austrian DPA

AI, Specific processing situations

AI Development Recommendations to Ensure GDPR Compliance by CNIL

AI, Specific processing situations

Statement 2/2024 on the financial data access and payments package bg EDPB

Finance and Fintech

The Colorado AI Act “Senate Bill SB24-205”

AI, Specific processing situations

Review of cybersecurity news in Ukraine, tendencies, and world events related to the First World Cyber War by U.S. Agency for International Development

National Security, Specific processing situations

Artificial Intelligence Risk Management Framework by NIST: Generative Artificial Intelligence Profile

AI, Risk Management, Specific processing situations

Privacy, seriously by the UK ICO

AI, Privacy by Design, Product Privacy Design

AI and Data Protection risk toolkit by the UK ICO

AI, Data Protection Impact Assessment (DPIA)

Building a Cybersecurity and Privacy Learning Program | NIST | Initial Public Draft

Data Breaches, Employment, Risk Management, Technical and Organisational Measures (TOMs)

A Guide to UK GDPR Principles | UK ICO

Accountability, Accuracy, Data minimisation, Integrity and confidentiality, Lawfulness of Processing, Principles, Purpose limitation, Storage limitation, Transparency

A Guide to Lawful Basis | UK ICO

Consent, Lawfulness of Processing, Legal Obligation, Legitimate Interest, Performance of Contract, Public Interests, Vital Interests

The Employment Practices Code | UK ICO

Data Subjects Rights, Employment

The EDPB data protection guide for small business

AI, Risk Management

Approach to Data Spaces from GDPR Perspective (AEPD)

Data Spaces, Risk Management