GDPR m.24 Kaynak Fihristi

VB v Natsionalna agentsia za prihodite

Court of Justice of the European Union, VB v Natsionalna agentsia za prihodite, ECLI:EU:C:2023:986, 2023-12-14

TR v Land Hessen

Court of Justice of the European Union, TR v Land Hessen, ECLI:EU:C:2024:785, 2024-09-26

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

European Data Protection Board, Guidelines 07/2020 on the concepts of controller and processor in the GDPR

Avis n° 158/2023 du 20 novembre 2023

Avis n° 158/2023 du 20 novembre 2023, 2023-01-01

Avis n° 120/2026 du 11 juin 2026

Avis n° 120/2026 du 11 juin 2026, 2026-01-01

Avis n° 12/2026 du 3 février 2026

Avis n° 12/2026 du 3 février 2026, 2026-01-01

Recommandation n° 01/2018 du 28 février 2018

Recommandation n° 01/2018 du 28 février 2018, 2018-01-01

Avis n° 47/2018 du 23 mai 2018

Avis n° 47/2018 du 23 mai 2018, 2018-01-01

Autorisation 001/2026 du 16 février 2026

Autorisation 001/2026 du 16 février 2026, 2026-01-01

Avis n° 18/2020 du 21 février 2020

Avis n° 18/2020 du 21 février 2020, 2020-01-01

Avis n° 129/2025 du 2 décembre 2025

Avis n° 129/2025 du 2 décembre 2025, 2025-01-01

Avis n° 112/2019 du 5 juin 2019

Avis n° 112/2019 du 5 juin 2019, 2019-01-01

Avis n° 31/2020 du 3 avril 2020

Avis n° 31/2020 du 3 avril 2020, 2020-01-01

Avis n° 35/2023 du 9 février 2023

Avis n° 35/2023 du 9 février 2023, 2023-01-01

Avis n° 67/2018 du 25 juillet 2018

Avis n° 67/2018 du 25 juillet 2018, 2018-01-01

Avis n° 118/2019 du 5 juin 2019

Avis n° 118/2019 du 5 juin 2019, 2019-01-01

Avis n° 52/2019 du 27 février 2019

Avis n° 52/2019 du 27 février 2019, 2019-01-01

Rapport annuel 2020

Rapport annuel 2020, 2021-01-01

Avis n° 58/2018 du 4 juillet 2018

Avis n° 58/2018 du 4 juillet 2018, 2018-01-01

13.12.2019 - Report on Experience Gained in the Implementation of the GDPR

Orientierungshilfe der DSK zu Künstlicher Intelligenz und Datenschutz

13.12.2019 - Erfahrungsbericht der unabhängigen Datenschutzaufsichtsbehörden des Bundes und der Länder zur Anwendung der DS-GVO

Orientierungshilfe: Anforderungen an Anbieter von Online-Diensten zur Zugangssicherung

Videoüberwachung durch nicht-öffentliche Stellen

01.04.2019 - Positionierung zur Verantwortlichkeit und Rechenschaftspflicht bei Facebook-Fanpages sowie der aufsichtsbehördlichen Zuständigkeit

Orientierungshilfe der Aufsichtsbehörden zur Verarbeitung von personenbezogenen Daten für Zwecke der Direktwerbung unter Geltung der Datenschutz-Grundverordnung (DS-GVO)

Immaterieller Schadensersatz wegen Verletzung der Datenschutz-Grundverordnung: Kurzzeitiger Verlust der Kontrolle über eigene personenbezogene Daten bei Facebook

Immaterieller Schadensersatz wegen Verletzung der Datenschutz-Grundverordnung: Kurzzeitiger Verlust der Kontrolle über eigene personenbezogene Daten bei Facebook, 2024-11-18

Bundessozialgericht, B 1 KR 15/20 R

Bundessozialgericht, B 1 KR 15/20 R, 2021-01-20

EuGH-Vorlage zu Schadensersatzklage wegen Verletzung der Pflicht zur Auskunft über Verarbeitung von personenbezogenen Daten in Bußgeldverfahren

EuGH-Vorlage zu Schadensersatzklage wegen Verletzung der Pflicht zur Auskunft über Verarbeitung von personenbezogenen Daten in Bußgeldverfahren, 2025-05-06

Krankenversicherung - elektronische Gesundheitskarte und Telematikinfrastruktur - Vereinbarkeit mit Europa- und Verfassungsrecht - Gewährleistung einer angemessenen Datensicherheit - Beobachtungs- und Nachbesserungspflicht - Überwachung durch die Aufsichtsbehörden - gerichtliche Überprüfbarkeit

Krankenversicherung - elektronische Gesundheitskarte und Telematikinfrastruktur - Vereinbarkeit mit Europa- und Verfassungsrecht - Gewährleistung einer angemessenen Datensicherheit - Beobachtungs- und Nachbesserungspflicht - Überwachung durch die Aufsichtsbehörden - gerichtliche Überprüfbarkeit, 2021-01-20

Adfærdskodekser (Vejledning 1/2019)

Samspillet mellem det andet direktiv om betalingstjenester og databeskyttelsesforordningen (Vejledning 6/2020)

engelsk version

De nordiske tilsynsmyndigheders fælles principper om børn og online spil (juni 2024)

Retten til indsigt (Vejledning 01/2022)

Målrettet markedsføring i forhold til brugere af sociale medier (Vejledning 8/2020)

EDPB Annual Report 2024

EDPB Response to the MEP Sophie in't Veld's letter on unfair algorithms

Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)

Guidelines 9/2022 on personal data breach notification under GDPR

European Data Protection Board, Guidelines 9/2022 on personal data breach notification under GDPR

Legal study on the appropriate safeguards under Article 89(1) GDPR for the processing of personal data for scientific research

Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)

Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

Guidelines 01/2022 on data subject rights - Right of access

European Data Protection Board, Guidelines 01/2022 on data subject rights - Right of access

Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR)

AI Privacy Risks & Mitigations Large Language Models (LLMs)

Coordinated Enforcement Action, Designation and Position of Data Protection Officers

Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR

Coordinated Enforcement Action, use of cloud-based services by the public sector

Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

European Data Protection Board, Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR

Law & Compliance in AI Security & Data Protection

EDPB Annual Report 2021

Coordinated Enforcement Action, implementation of the right to erasure by controllers

EDPB letter to Accredia

Binding Decision 2/2022 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Meta Platforms Ireland Limited (Instagram) under Article 65(1)(a) GDPR

EDPB-EDPS Joint Opinion 3/2026 on the Proposal for a European Biotech Act

Guidelines 8/2020 on the targeting of social media users

European Data Protection Board, Guidelines 8/2020 on the targeting of social media users

Report of the work undertaken by the ChatGPT Taskforce

EDPB Annual Report 2023

Guidelines 3/2019 on processing of personal data through video devices

EDPB letter to the European Commission on the protection of personal data in the AML-CFT legislative proposals

One-Stop-Shop case digest on Security of Processing and Data Breach Notification

Study on the secondary use of personal data in the context of scientific research

Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models

Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR

Report of the work undertaken by the supervisory authorities within the 101 Taskforce

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

Statement 1/2025 on Age Assurance

Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR

Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

European Data Protection Board, Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the General Data Protection Regulation (2016/679)

EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR

Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR)

EDPB Annual Report 2025

EDPB Annual Report 2022

Guidelines on processing of personal data through blockchain technologies

European Data Protection Board, Guidelines on processing of personal data through blockchain technologies

Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

European Data Protection Board, Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679

EDPBI:FR:OSS:D:2020:89 — FR SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2020:89 — FR SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2020-02-25

EDPBI:LT:OSS:D:2024:1361 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:LT:OSS:D:2024:1361 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-07-02

EDPBI:LV:OSS:D:2019:79 — LV SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:LV:OSS:D:2019:79 — LV SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2019-11-08

EDPBI:IE:OSS:D:2020:159 — IE SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:IE:OSS:D:2020:159 — IE SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2020-11-11

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor))

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor)), 2023-09-13

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject))

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject)), 2022-04-26

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-11-29

EDPBI:MT:OSS:D:2021:212 — MT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller))

EDPBI:MT:OSS:D:2021:212 — MT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller)), 2021-04-27

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-08-19

EDPBI:CY:OSS:D:2023:927 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller))

EDPBI:CY:OSS:D:2023:927 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller)), 2023-09-07

EDPBI:DK:OSS:D:2021:282 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:DK:OSS:D:2021:282 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2021-10-06

EDPBI:EE:OSS:D:2024:1093 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority))

EDPBI:EE:OSS:D:2024:1093 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority)), 2024-01-03

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-03-16

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-08-25

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing)), 2025-04-28

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-02-02

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2019-05-16

EDPBI:DE:OSS:D:2022:527 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:DE:OSS:D:2022:527 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-10-21

EDPBI:SE:OSS:D:2025:3448 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:3448 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-05-05

EDPBI:FR:OSS:D:2023:1012 — FR SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 24 (Responsibility of the controller))

EDPBI:FR:OSS:D:2023:1012 — FR SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 24 (Responsibility of the controller)), 2023-11-13

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-04-10

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2024-12-11

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2025-04-25

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority))

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority)), 2025-09-04

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller))

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller)), 2024-07-17

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2024-02-14

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-09-29

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority))

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority)), 2024-12-18

EDPBI:SE:OSS:D:2025:1753 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:1753 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2025-05-05

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-04-26

EDPBI:SE:OSS:D:2024:1527 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1527 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-11-14

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2025-08-05

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-05-10

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-08-30

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-09-04

EDPBI:IE:OSS:D:2023:804 — IE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:804 — IE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-06-19

EDPBI:DE:OSS:D:2020:152 — DE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2020:152 — DE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2020-10-27

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2021-02-02

EDPBI:NL:OSS:D:2025:3523 — NL SA final decision (Article 24 (Responsibility of the controller))

EDPBI:NL:OSS:D:2025:3523 — NL SA final decision (Article 24 (Responsibility of the controller)), 2025-07-01

EDPBI:DE:OSS:D:2019:27 — AT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 24 (Responsibility of the controller))

EDPBI:DE:OSS:D:2019:27 — AT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 24 (Responsibility of the controller)), 2019-07-02

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-07

EDPBI:CZ:OSS:D:2019:28 — CZ SA final decision (Article 24 (Responsibility of the controller), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:CZ:OSS:D:2019:28 — CZ SA final decision (Article 24 (Responsibility of the controller), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2019-07-11

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-09

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing))

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing)), 2024-09-18

EDPBI:RO:OSS:D:2023:775 — RO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject))

EDPBI:RO:OSS:D:2023:775 — RO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject)), 2023-05-17

EDPBI:FR:OSS:D:2020:120 — FR SA final decision (Article 15 (Right of access by the data subject))

EDPBI:FR:OSS:D:2020:120 — FR SA final decision (Article 15 (Right of access by the data subject)), 2020-07-03

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-12-19

EDPBI:CY:OSS:D:2021:305 — CY SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2021:305 — CY SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-10-19

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-02-06

EDPBI:IE:OSS:D:2022:579 — IE SA final decision (Article 15 (Right of access by the data subject))

EDPBI:IE:OSS:D:2022:579 — IE SA final decision (Article 15 (Right of access by the data subject)), 2022-12-02

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards)), 2022-04-22

Patrones adictivos y el derecho a la integridad de la persona

Patrones adictivos y el derecho a la integridad de la persona, 2024-12-16

Patrones adictivos en el tratamiento de datos personales

Patrones adictivos en el tratamiento de datos personales, 2024-07-10

Inteligencia artificial agéntica desde la perspectiva de la protección de datos

Inteligencia artificial agéntica desde la perspectiva de la protección de datos, 2026-02-18

Gestión del riesgo y evaluación de impacto en tratamientos de datos personales

Gestión del riesgo y evaluación de impacto en tratamientos de datos personales, 2021-06-29

Guía sobre tratamientos de control de presencia mediante sistemas biométricos

Guía sobre tratamientos de control de presencia mediante sistemas biométricos, 2023-11-23

Recomendaciones para fortalecer el cumplimiento de la normativa de protección de datos en la AGE

Recomendaciones para fortalecer el cumplimiento de la normativa de protección de datos en la AGE, 2026-07-14

Exactitud, idoneidad y calidad de los datos en tratamientos de datos personales con Inteligencia Artificial

Exactitud, idoneidad y calidad de los datos en tratamientos de datos personales con Inteligencia Artificial, 2026-07-21

Adecuación al RGPD de tratamientos que incorporan Inteligencia Artificial

Adecuación al RGPD de tratamientos que incorporan Inteligencia Artificial, 2020-02-13

Orientaciones para la validación de sistemas criptográficos en la protección de datos

Orientaciones para la validación de sistemas criptográficos en la protección de datos, 2023-05-09

Orientaciones para tratamientos que implican comunicación de datos entre Administraciones Públicas ante el riesgo de brechas de datos personales

Orientaciones para tratamientos que implican comunicación de datos entre Administraciones Públicas ante el riesgo de brechas de datos personales, 2023-03-28

Orientaciones para la realización de una evaluación de impacto para la protección de datos en el desarrollo normativo

Orientaciones para la realización de una evaluación de impacto para la protección de datos en el desarrollo normativo, 2023-04-18

Guía de privacidad desde el diseño

Guía de privacidad desde el diseño, 2019-10-17

Técnologías de seguimiento WIFI: Orientaciones para responsables del tratamiento

Técnologías de seguimiento WIFI: Orientaciones para responsables del tratamiento, 2024-05-07

Requisitos para Auditorías de Tratamientos que incluyan IA

Requisitos para Auditorías de Tratamientos que incluyan IA, 2021-01-12

Guía de Protección de Datos por defecto

Guía de Protección de Datos por defecto, 2020-10-08

Aproximación a los espacios de datos desde la perspectiva del RGPD

Aproximación a los espacios de datos desde la perspectiva del RGPD, 2023-05-04

ECLI:EU:C:2022:43

Case C-37/20 ECLI:EU:C:2022:43 EU:C:2022:43, Opinion of AG Pitruzzella, 2022-01-20

VB v Natsionalna agentsia za prihodite

Case C-340/21 VB v Natsionalna agentsia za prihodite EU:C:2023:353, Opinion of AG Pitruzzella

Cafpi and Aviva assurances ( Prevention of the use of the financial system for the purpose of money laundering and terrorist financing - Application ) French Text [2022] EUECJ C-691/21

Case C-691/21 Cafpi and Aviva assurances (Prevention of the use of the financial system for the purpose of money laundering and terrorist financing - Application), 2022-01-21

BL v MediaMarktSaturn Hagen-Iserlohn GmbH

BL v MediaMarktSaturn Hagen-Iserlohn GmbH EU:C:2024:72, 2024-01-25

X v Russmedia Digital SRL and Inform Media Press SRL

Court of Justice of the European Union, X v Russmedia Digital SRL and Inform Media Press SRL, ECLI:EU:C:2025:935, 2025-12-02

IAB Europe (Protection of natural persons with regard to the processing of personal data - Sector-specific standard-setting organisation proposing to its members rules on the processing of users' consent - Judgment) French Text [2024] EUECJ C-604/22

Case C-604/22 IAB Europe (Protection of natural persons with regard to the processing of personal data - Sector-specific standard-setting organisation proposing to its members rules on the processing of users' consent), 2024-03-07

ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts

Court of Justice of the European Union, ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts, ECLI:EU:C:2023:1022, 2023-12-21

Proximus NV v Gegevensbeschermingsautoriteit

Court of Justice of the European Union, Proximus NV v Gegevensbeschermingsautoriteit, ECLI:EU:C:2022:833, 2022-10-27

Commission v Hungary (Valeurs de l'Union) (Failure of a Member State to fulfil obligations - National legislation introducing restrictions in relation to deviation from the self-identity corresponding to the sex assigned at birth, gender reassignment, or homosexuality, with a view to protecting children - Judgment) [2026] EUECJ C-769/22

Case C-769/22 Commission v Hungary (Valeurs de l'Union) (Failure of a Member State to fulfil obligations - National legislation introducing restrictions in relation to deviation from the self-identity corresponding to the sex assigned at birth, gender reassignment, or homosexuality, with a view to protecting children) EU:C:2026:326

Proximus NV (Public electronic directories) v Gegevensbeschermingsautoriteit

Case C-129/21 Proximus NV (Public electronic directories) v Gegevensbeschermingsautoriteit EU:C:2022:332, Opinion of AG Collins

MediaMarktSaturn ( - - Judgment) French Text [2024] EUECJ C-687/21

Case C-687/21 MediaMarktSaturn (-), 2024-01-25

Proceedings brought by J.M

Proceedings brought by J.M EU:C:2022:1001, Opinion of AG

Nacionalinis visuomenės sveikatos centras (Protection of personal data - Concept of 'controller' - Opinion) [2023] EUECJ C-683/21_O

Case C-683/21 Nacionalinis visuomenės sveikatos centras (Protection of personal data - Concept of 'controller') EU:C:2023:376, Opinion of AG Emiliou

IAB Europe v Gegevensbeschermingsautoriteit

IAB Europe v Gegevensbeschermingsautoriteit EU:C:2024:214, 2024-03-07

ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts

Case C-667/21 ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts EU:C:2023:433, Opinion of AG Campos Sánchez-Bordona

Outcome of own-initiative investigation into EU institutions’ use of Microsoft products and services

Outcome of own-initiative investigation into EU institutions’ use of Microsoft products and services, 2020-07-02

Commission Implementing Regulation (EU) 2024/607 of 15 February 2024 on the practical and operational arrangements for the functioning of the information sharing system pursuant to Regulation (EU) 2022/2065 of the European Parliament and of the Council ( Digital Services Act )

Commission Implementing Regulation (EU) 2024/607 of 15 February 2024 on the practical and operational arrangements for the functioning of the information sharing system pursuant to Regulation (EU) 2022/2065 of the European Parliament and of the Council (Digital Services Act)

ANNEX II JOINT CONTROLLERSHIP OF THE EUROPEAN UNION RAPID INFORMATION SYSTEM RAPEX ESTABLISHED UNDER ARTICLE 12 OF DIRECTIVE 2001/95/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL Directive 2001/95/EC of the European Parliament and of the Council of 3 December 2001 on general product safety ( OJ L 11, 15.1.2002, p. 4 ). (THE GENERAL PRODUCT SAFETY DIRECTIVE)

ANNEX II JOINT CONTROLLERSHIP OF THE EUROPEAN UNION RAPID INFORMATION SYSTEM RAPEX ESTABLISHED UNDER ARTICLE 12 OF DIRECTIVE 2001/95/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL Directive 2001/95/EC of the European Parliament and of the Council of 3 December 2001 on general product safety (OJ L 11, 15.1.2002, p. 4). (THE GENERAL PRODUCT SAFETY DIRECTIVE)

Regulation (EU) 2023/2674 of the European Parliament and of the Council of 22 November 2023 amending Council Regulation (EC) No 1217/2009 as regards conversion of the Farm Accountancy Data Network into a Farm Sustainability Data Network

Recommandations - Diffuseurs de données ouvertes (open data)

Recommandations - Diffuseurs de données ouvertes (open data), 2024-06-01

Recommandations - Réutilisateurs de données publiées sur Internet

Recommandations - Réutilisateurs de données publiées sur Internet, 2024-06-01

Délibération 2023-087 du 14 septembre 2023

Délibération 2023-087 du 14 septembre 2023, 2023-09-14

Délibération 2022-064 du 9 juin 2022

Délibération 2022-064 du 9 juin 2022, 2022-06-09

Loi n° 78-17 du 6 janvier 1978 — Article 70-13

Loi n° 78-17 du 6 janvier 1978 — Article 70-13, 2018-05-25

DELIBERATION n°2018-365 du 20 DECEMBRE 2018

DELIBERATION n°2018-365 du 20 DECEMBRE 2018, 2018-12-20

Délibération 2023-071 du 20 juillet 2023

Délibération 2023-071 du 20 juillet 2023, 2023-07-20

Délibération 2019-010 du 31 janvier 2019

Délibération 2019-010 du 31 janvier 2019, 2019-01-31

Loi n° 78-17 du 6 janvier 1978 — Article 57

Loi n° 78-17 du 6 janvier 1978 — Article 57, 2019-06-01

DELIBERATION n°2018-363 du 20 DECEMBRE 2018

DELIBERATION n°2018-363 du 20 DECEMBRE 2018, 2018-12-20

DELIBERATION n°2019-022 du 28 FEVRIER 2019

DELIBERATION n°2019-022 du 28 FEVRIER 2019, 2019-02-28

Délibération SAN-2021-016 du 24 septembre 2021

Délibération SAN-2021-016 du 24 septembre 2021, 2021-09-24

DELIBERATION n°2018-360 du 13 DECEMBRE 2018

DELIBERATION n°2018-360 du 13 DECEMBRE 2018, 2018-12-13

DELIBERATION n°2019-030 du 14 MARS 2019

DELIBERATION n°2019-030 du 14 MARS 2019, 2019-03-14

Délibération 2018-256 du 7 juin 2018

Délibération 2018-256 du 7 juin 2018, 2018-06-07

Délibération 2018-362 du 20 décembre 2018

Délibération 2018-362 du 20 décembre 2018, 2018-12-20

Délibération 2024-005 du 25 janvier 2024

Délibération 2024-005 du 25 janvier 2024, 2024-01-25

Délibération 2021-046 du 15 avril 2021

Délibération 2021-046 du 15 avril 2021, 2021-04-15

Délibération 2022-095 du 22 septembre 2022

Délibération 2022-095 du 22 septembre 2022, 2022-09-22

Délibération 2018-334 du 18 octobre 2018

Délibération 2018-334 du 18 octobre 2018, 2018-10-18

Délibération 2019-142 du 5 décembre 2019

Délibération 2019-142 du 5 décembre 2019, 2019-12-05

Délibération 2024-020 du 14 mars 2024

Délibération 2024-020 du 14 mars 2024, 2024-03-14

Délibération 2018-257 du 7 juin 2018

Délibération 2018-257 du 7 juin 2018, 2018-06-07

Délibération 2022-098 du 15 septembre 2022

Délibération 2022-098 du 15 septembre 2022, 2022-09-15

Délibération 2022-052 du 21 avril 2022

Délibération 2022-052 du 21 avril 2022, 2022-04-21

DELIBERATION n°2019-004 du 10 JANVIER 2019

DELIBERATION n°2019-004 du 10 JANVIER 2019, 2019-01-10

Délibération 2023-117 du 9 novembre 2023

Délibération 2023-117 du 9 novembre 2023, 2023-11-09

Délibération 2018-359 du 13 décembre 2018

Délibération 2018-359 du 13 décembre 2018, 2018-12-13

DELIBERATION n°2019-122 du 3 OCTOBRE 2019

DELIBERATION n°2019-122 du 3 OCTOBRE 2019, 2019-10-03

Code pénal — Article 226-17

Code pénal — Article 226-17, 2019-06-01

Délibération 2022-088 du 21 juillet 2022

Délibération 2022-088 du 21 juillet 2022, 2022-07-21

Délibération 2020-079 du 23 juillet 2020

Délibération 2020-079 du 23 juillet 2020, 2020-07-23

Délibération 2024-013 du 29 février 2024

Délibération 2024-013 du 29 février 2024, 2024-02-29

Délibération 2022-039 du 31 mars 2022

Délibération 2022-039 du 31 mars 2022, 2022-03-31

Délibération 2023-148 du 21 décembre 2023

Délibération 2023-148 du 21 décembre 2023, 2023-12-21

Loi n° 78-17 du 6 janvier 1978 — Article 99

Loi n° 78-17 du 6 janvier 1978 — Article 99, 2019-06-01

DELIBERATION n°2019-090 du 18 JUILLET 2019

DELIBERATION n°2019-090 du 18 JUILLET 2019, 2019-07-18

DELIBERATION n°2019-112 du 5 SEPTEMBRE 2019

DELIBERATION n°2019-112 du 5 SEPTEMBRE 2019, 2019-09-05

Délibération 2023-020 du 9 mars 2023

Délibération 2023-020 du 9 mars 2023, 2023-03-09

Délibération 2024-022 du 14 mars 2024

Délibération 2024-022 du 14 mars 2024, 2024-03-14

Délibération 2023-149 du 21 décembre 2023

Délibération 2023-149 du 21 décembre 2023, 2023-12-21

Délibération 2022-038 du 31 mars 2022

Délibération 2022-038 du 31 mars 2022, 2022-03-31

Délibération 2023-116 du 9 novembre 2023

Délibération 2023-116 du 9 novembre 2023, 2023-11-09

Délibération 2020-023 du 6 février 2020

Délibération 2020-023 du 6 février 2020, 2020-02-06

Délibération 2022-020 du 17 février 2022

Délibération 2022-020 du 17 février 2022, 2022-02-17

DELIBERATION n°2019-048 du 11 AVRIL 2019

DELIBERATION n°2019-048 du 11 AVRIL 2019, 2019-04-11

DELIBERATION n°2019-085 du 4 JUILLET 2019

DELIBERATION n°2019-085 du 4 JUILLET 2019, 2019-07-04

Délibération 2025-018 du 20 mars 2025

Délibération 2025-018 du 20 mars 2025, 2025-03-20

Délibération 2020-034 du 19 mars 2020

Délibération 2020-034 du 19 mars 2020, 2020-03-19

DELIBERATION n°2018-297 du 19 JUILLET 2018

DELIBERATION n°2018-297 du 19 JUILLET 2018, 2018-07-19

Décision MED-2019-027 du 12 novembre 2019

Décision MED-2019-027 du 12 novembre 2019, 2019-11-12

DELIBERATION n°2018-364 du 20 DECEMBRE 2018

DELIBERATION n°2018-364 du 20 DECEMBRE 2018, 2018-12-20

Persónuvernd (Iceland) - 2020092288

Persónuvernd (Iceland) - 2020092288, 2021-11-23

APD/GBA (Belgium) - 21/2022

EDPB - Binding Decision 5/2022 - 'Whatsapp'

EDPB - Binding Decision 5/2022 - 'Whatsapp', 2022-12-05

Rb. Midden-Nederland - AWB - 19 1687

Rb. Midden-Nederland - AWB - 19 1687, 2020-05-29

AEPD (Spain) - EXP202318538

AEPD (Spain) - EXP202318538, 2025-08-11

Datatilsynet (Norway) - 20/02274

Datatilsynet (Norway) - 20/02274, 2021-06-07

APD/GBA (Belgium) - 02/2025

APD/GBA (Belgium) - 02/2025, 2025-01-07

LG München - 31 O 16606/20

LG München - 31 O 16606/20, 2021-12-09

HDPA (Greece) - 13/2024

HDPA (Greece) - 13/2024, 2023-10-17

Datatilsynet (Norway) - 21/03823-45

Datatilsynet (Norway) - 21/03823-45, 2025-03-10

Datatilsynet (Norway) - 24/00793-9

Datatilsynet (Norway) - 24/00793-9, 2024-09-04

NAIH (Hungary) - NAIH-2732-2-2023

NAIH (Hungary) - NAIH-2732-2-2023, 2023-02-06

Persónuvernd (Iceland) - 2020031451

Persónuvernd (Iceland) - 2020031451, 2022-03-14

Court of Appeal of Brussels - 2021/AR/205

Court of Appeal of Brussels - 2021/AR/205, 2021-05-26

APD/GBA (Belgium) - 75/2023

TB - 10037/2025

TB - 10037/2025, 2025-12-10

APD/GBA (Belgium) - 76/2025

APD/GBA (Belgium) - 76/2025, 2025-04-24

AEPD (Spain) - EXP202205208

AEPD (Spain) - EXP202205208, 2025-04-04

Datainspektionen - DI-2019-3839

Datainspektionen - DI-2019-3839, 2020-12-02

APD/GBA (Belgium) - 10/2026

APD/GBA (Belgium) - 10/2026, 2026-01-27

APD/GBA (Belgium) - 03/2021

APD/GBA (Belgium) - 03/2021, 2021-01-13

IP (Slovenia) - 0600-43/2024/12

IP (Slovenia) - 0600-43/2024/12, 2025-03-20

Datatilsynet (Norway) - 20/02368

Datatilsynet (Norway) - 20/02368, 2022-03-15

Cass.Civ. - 15625/2026

Cass.Civ. - 15625/2026, 2026-05-21

Tallinna Ringkonnakohus - 3-23-1025/19

Tallinna Ringkonnakohus - 3-23-1025/19, 2025-06-19

APD/GBA (Belgium) - 82/2020

APD/GBA (Belgium) - 82/2020, 2020-12-23

APD/GBA (Belgium) - 12/2019

APD/GBA (Belgium) - 12/2019, 2019-12-17

DVI (Latvia) - SIA “JK Media group”

DVI (Latvia) - SIA “JK Media group”, 2024-03-28

AEPD (Spain) - EXP202305035

AEPD (Spain) - EXP202318430

AEPD (Spain) - EXP202318430, 2025-01-12

APD/GBA (Belgium) - 01/2022

OLG Dresden - 4 U 808/24

OLG Dresden - 4 U 808/24, 2024-12-10

APD/GBA (Belgium) - 105/2023

APD/GBA (Belgium) - 105/2023, 2023-08-01

CNIL (France) - MED-2019-027

CNIL (France) - MED-2019-027, 2019-11-12

AEPD (Spain) - PS/00059/2020

APD/GBA (Belgium) - 100/2026

APD/GBA (Belgium) - 100/2026, 2026-05-11

OVG Rheinland-Pfalz - 10 A 10302/21

OVG Rheinland-Pfalz - 10 A 10302/21, 2021-06-25

Datatilsynet (Denmark) - 2021-441-10210

APD/GBA (Belgium) - 19/2023

APD/GBA (Belgium) - 19/2023, 2023-03-03

Persónuvernd - 2020010428

Persónuvernd - 2020010428, 2020-03-05

AEPD (Spain) - EXP202306354 (PS/00312/2024)

Court of Appeal of Brussels - 2022/AR/292

Court of Appeal of Brussels - 2022/AR/292, 2022-09-07

APD/GBA (Belgium) - 74/2020

APD/GBA (Belgium) - 74/2020, 2020-11-24

AKI (Estonia) - 14.02.2024

AKI (Estonia) - 14.02.2024, 2024-02-14

APD/GBA (Belgium) - 57/2023

APD/GBA (Belgium) - 57/2023, 2023-05-17

SG Nürnberg - S 5 SF 65/24 DS

SG Nürnberg - S 5 SF 65/24 DS, 2026-06-10

OLG Stuttgart - 9 U 34/21

OLG Stuttgart - 9 U 34/21, 2021-03-31

BGH - Az. VI ZR 426/24

BGH - Az. VI ZR 426/24, 2025-07-29

Garante per la protezione dei dati personali (Italy) 10105764

Garante per la protezione dei dati personali (Italy) 10105764, 2024-12-24

AEPD (Spain) - EXP202315096

AEPD (Spain) - PS/00037/2020

APD/GBA (Belgium) - 02/2021

APD/GBA (Belgium) - 02/2021, 2021-01-12

CNPD (Portugal) - Deliberação 2019/494

CNPD (Portugal) - Deliberação 2019/494, 2019-09-03

Rb. Amsterdam - C/13/683377 / HA ZA 20-468

Rb. Amsterdam - C/13/683377 / HA ZA 20-468, 2023-03-15

ANSPDCP (Romania) - 30.12.2025

ANSPDCP (Romania) - 30.12.2025, 2025-12-30

HDPA (Greece) - Decision 18/2024

APD/GBA (Belgium) - 101/2026

APD/GBA (Belgium) - 101/2026, 2026-05-12

ANSPDCP (Romania) - 29.12.2025

BGH - VI ZR 10/24

BGH - VI ZR 10/24, 2024-11-18

APD/GBA (Belgium) - 14/2025

APD/GBA (Belgium) - 14/2025, 2025-01-23

Personvernnemnda (Norway) - 2021-03

Personvernnemnda (Norway) - 2021-03, 2021-06-22

IP (Slovenia) - SI – 07101-5-2023-16

IP (Slovenia) - SI – 07101-5-2023-16, 2023-11-13

APD/GBA (Belgium) - 87/2024

APD/GBA (Belgium) - 87/2024, 2024-06-03

APD/GBA (Belgium) - 136/2023

APD/GBA (Belgium) - 136/2023, 2023-09-28

Datainspektionen - DI-2019-3840

Datainspektionen - DI-2019-3840, 2020-12-02

HDPA (Greece) - 31/2025

HDPA (Greece) - 31/2025, 2025-06-24

APD/GBA (Belgium) - 15/2023

APD/GBA (Belgium) - 15/2023, 2023-02-21

HDPA (Greece) - 5/2026

HDPA (Greece) - 10/2026

HDPA (Greece) - 10/2026, 2026-06-12

APD/GBA (Belgium) - 31/2022

VDAI (Lithuania) - 3R-1143

VDAI (Lithuania) - 3R-1143, 2026-06-19

HDPA (Greece) - 1/2025

HDPA (Greece) - 1/2025, 2025-01-09

APD/GBA (Belgium) - 146/24

APD/GBA (Belgium) - 146/24, 2024-11-28

DPC (Ireland) - 07/SIU/2018

DPC (Ireland) - 07/SIU/2018, 2024-11-13

APD/GBA (Belgium) - 81/2023

APD/GBA (Belgium) - 81/2023, 2023-06-22

NAIH (Hungary) - NAIH-85-3/2022

NAIH (Hungary) - NAIH-85-3/2022, 2022-02-08

Datatilsynet (Norway) - 20/02375

Datatilsynet (Norway) - 20/02375, 2021-09-21

IDPC (Malta) - CDP/COMP/344/2022

Datatilsynet (Norway) - 20/01896

Datatilsynet (Norway) - 20/01896, 2020-12-07

AEPD (Spain) - EXP202305134

AEPD (Spain) - EXP202315180

AEPD (Spain) - EXP202315180, 2025-06-20

AEPD (Spain) - EXP202306073

APD/GBA (Belgium) - 73/2025

APD/GBA (Belgium) - 73/2025, 2025-04-23

Datatilsynet (Norway) - 21/01164

Datatilsynet (Norway) - 21/01164, 2022-02-24

AP (The Netherlands) - 24.02.2022

AP (The Netherlands) - 24.02.2022, 2022-02-24

ICO (UK) - Parkside Community Primary School

APD/GBA (Belgium) - 101/2022

APD/GBA (Belgium) - 101/2022, 2022-06-03

Datatilsynet (Norway) - 20/04401

Datatilsynet (Norway) - 20/04401, 2021-12-13

CNIL (France) - SAN-2026-001

CNIL (France) - SAN-2026-001, 2026-01-08

DPC (Ireland) - 06/SIU/2018

DPC (Ireland) - 06/SIU/2018, 2023-08-22

Rb. Amsterdam - C/13/731682 / HA ZA 23-329

Rb. Amsterdam - C/13/731682 / HA ZA 23-329, 2024-07-17

APD/GBA (Belgium) - 47/2022

APD/GBA (Belgium) - 47/2022, 2022-04-04

DPC (Ireland) - IN-19-7-2

DPC (Ireland) - IN-19-7-2, 2021-03-23

Datatilsynet (Denmark) - 2023-423-0016

APD/GBA (Belgium) - 79/2025

APD/GBA (Belgium) - 79/2025, 2025-04-24

CNPD (Portugal) - Deliberação 2021/548

CNPD (Portugal) - Deliberação 2021/548, 2021-04-27

BVwG - W214 2230473-1

BVwG - W214 2230473-1, 2020-09-25

OLG Düsseldorf - 16 U 83/24

OLG Düsseldorf - 16 U 83/24, 2025-07-10

Commissioner (Cyprus) - 11.17.001.011.218

Commissioner (Cyprus) - 11.17.001.011.218, 2024-09-04

APD/GBA (Belgium) - 117/2021

APD/GBA (Belgium) - 117/2021, 2021-10-22

AEPD (Spain) - EXP202406239

APD/GBA (Belgium) - 127/2022

APD/GBA (Belgium) - 127/2022, 2022-08-19

Persónuvernd (Island) - 2022020363

Persónuvernd (Island) - 2022020363, 2023-12-06

Persónuvernd - 2020010649

Persónuvernd - 2020010649, 2020-09-04

APD/GBA (Belgium) - 22/2020

APD/GBA (Belgium) - 22/2020, 2020-05-08

AEPD (Spain) - PS/00187/2020

AEPD (Spain) - PS/00187/2020, 2020-11-16

Datatilsynet (Norway) - 20/01516

Datatilsynet (Norway) - 20/01516, 2021-03-15

HDPA (Greece) - 20/2020

HDPA (Greece) - 20/2020, 2020-03-03

APD/GBA (Belgium) - 114/2024

APD/GBA (Belgium) - 114/2024, 2024-09-06

APD/GBA (Belgium) - 159/2022

APD/GBA (Belgium) - 159/2022, 2022-11-07

Datatilsynet (Norway) - 20/02376

Datatilsynet (Norway) - 20/02376, 2021-05-28

APD/GBA (Belgium) - 20/2023

APD/GBA (Belgium) - 135/2022

APD/GBA (Belgium) - 135/2022, 2022-09-22

Datatilsynet (Norway) - 20/02291

Datatilsynet (Norway) - 20/02291, 2020-10-22

CPDP (Bulgaria) - PPN-01-291/03.05.2022

CPDP (Bulgaria) - PPN-01-291/03.05.2022, 2023-01-17

APD/GBA (Belgium) - 16/2023

DSB (Austria) - 2023-0.583.644

DSB (Austria) - 2023-0.583.644, 2023-12-07

High Court - 2025/248 MCA

High Court - 2025/248 MCA, 2025-11-13