GDPR m.33 İlgili Kararlar

Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR

EDPBI:DE:OSS:D:2021:222 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:222 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-05-17

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-10

EDPBI:DK:OSS:D:2023:734 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DK:OSS:D:2023:734 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-05-02

EDPBI:DE:OSS:D:2021:211 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:211 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-04-23

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-08-19

EDPBI:RO:OSS:D:2023:760 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:RO:OSS:D:2023:760 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-04-24

EDPBI:DE:OSS:D:2019:16 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:16 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-04-03

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing)), 2023-06-30

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject)), 2023-03-08

EDPBI:AT:OSS:D:2021:264 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:AT:OSS:D:2021:264 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-08-04

EDPBI:RO:OSS:D:2023:776 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:RO:OSS:D:2023:776 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-07-18

EDPBI:FR:OSS:D:2025:3488 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3488 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-05-27

EDPBI:DE:OSS:D:2020:162 — DE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:162 — DE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-11-11

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-09-29

EDPBI:DK:OSS:D:2021:190 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2021:190 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-01-27

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-07-20

EDPBI:AT:OSS:D:2023:689 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:689 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-06-21

EDPBI:DE:OSS:D:2021:293 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:293 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-11-16

EDPBI:FR:OSS:D:2021:201 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:201 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-03-31

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-06-17

EDPBI:DE:OSS:D:2020:133 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:133 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-08-05

EDPBI:SE:OSS:D:2023:774 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2023:774 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 32 (Security of processing)), 2023-05-30

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-11-29

EDPBI:DE:OSS:D:2022:349 — DK SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2022:349 — DK SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-03-13

EDPBI:DE:OSS:D:2020:132 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:132 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-08-05

EDPBI:DE:OSS:D:2019:4 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:4 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-01-25

EDPBI:FR:OSS:D:2021:169 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FR:OSS:D:2021:169 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-01-06

EDPBI:FR:OSS:D:2021:313 — FR SA final decision (Article 28 (Processor), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:313 — FR SA final decision (Article 28 (Processor), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-12-28

EDPBI:FR:OSS:D:2024:1433 — FR SA final decision (Article 15 (Right of access by the data subject), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2024:1433 — FR SA final decision (Article 15 (Right of access by the data subject), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-09-04

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2019-05-16

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-07

EDPBI:DE:OSS:D:2020:99 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:99 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-04-07

EDPBI:ES:OSS:D:2021:277 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:ES:OSS:D:2021:277 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-09-15

EDPBI:DK:OSS:D:2020:85 — DK SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2020:85 — DK SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-02-05

EDPBI:NO:OSS:D:2021:219 — NO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:NO:OSS:D:2021:219 — NO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-05-12

EDPBI:DE:OSS:D:2022:468 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2022:468 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-09-09

EDPBI:IT:OSS:D:2022:620 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:IT:OSS:D:2022:620 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-10-20

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-06-16

EDPBI:AT:OSS:D:2023:767 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:767 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-05-16

EDPBI:SE:OSS:D:2024:1529 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SE:OSS:D:2024:1529 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-11-18

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing))

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing)), 2020-04-15

EDPBI:LU:OSS:D:2025:1608 — LU SA final decision (Article 4 (Definitions), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:LU:OSS:D:2025:1608 — LU SA final decision (Article 4 (Definitions), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2025-01-17

EDPBI:SE:OSS:D:2025:1589 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SE:OSS:D:2025:1589 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2025-01-08

EDPBI:DE:OSS:D:2020:103 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:103 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-04-30

EDPBI:DE:OSS:D:2020:82 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:82 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-01-27

EDPBI:DE:OSS:D:2020:124 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:124 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-07-13

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor))

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor)), 2023-09-13

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing)), 2021-11-10

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2023-01-30

EDPBI:DK:OSS:D:2022:380 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2022:380 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-06-13

EDPBI:DE:OSS:D:2021:204 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:204 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-24

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-08-14

EDPBI:ES:OSS:D:2021:239 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:ES:OSS:D:2021:239 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-02-18

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller))

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller)), 2024-07-17

EDPBI:SE:OSS:D:2022:465 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:SE:OSS:D:2022:465 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-08-18

EDPBI:FR:OSS:D:2021:297 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:297 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-11-22

EDPBI:HU:OSS:D:2020:116 — HU SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:HU:OSS:D:2020:116 — HU SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-06-23

EDPBI:DE:OSS:D:2021:197 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:197 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-24

EDPBI:GB:OSS:D:2020:80 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2020:80 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-01-10

EDPBI:RO:OSS:D:2024:1302 — RO SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:RO:OSS:D:2024:1302 — RO SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-22

EDPBI:CZ:OSS:D:2019:44 — CZ SA final decision (Article 32 (Security of processing), Article 35 (Data protection impact assessment))

EDPBI:CZ:OSS:D:2019:44 — CZ SA final decision (Article 32 (Security of processing), Article 35 (Data protection impact assessment)), 2019-08-26

EDPBI:DE:OSS:D:2019:75 — BE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:75 — BE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-12-17

EDPBI:FI:OSS:D:2024:1295 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FI:OSS:D:2024:1295 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-29

EDPBI:FI:OSS:D:2024:1296 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FI:OSS:D:2024:1296 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-30

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-09-03

EDPBI:IT:OSS:D:2024:1122 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:IT:OSS:D:2024:1122 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-01-24

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-08-07

EDPBI:HU:OSS:D:2021:185 — HU SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:HU:OSS:D:2021:185 — HU SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-02-04

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-02-17

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-09

EDPBI:DE:OSS:D:2020:136 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:136 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-09-04

EDPBI:FR:OSS:D:2022:437 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2022:437 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-07-28

EDPBI:DK:OSS:D:2021:288 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DK:OSS:D:2021:288 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-10-26

EDPBI:DE:OSS:D:2020:125 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:125 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-07-13

EDPBI:GB:OSS:D:2019:24 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2019:24 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-06-22

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-10-16

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2023-06-08

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing))

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing)), 2024-09-18

EDPBI:DE:OSS:D:2021:187 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:187 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-01

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-12-19

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-06-18

EDPBI:DE:OSS:D:2020:114 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:114 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-06-16

EDPBI:FR:OSS:D:2024:1106 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FR:OSS:D:2024:1106 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-01-16

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-08-20

Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges - Judgment) [2025] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges) EU:C:2025:303, 2025-04-30

Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors - Opinion) FR [2024] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors) FR, 2024-10-04

ECLI:EU:C:2026:579

Case C-474/24 EU:C:2026:579

TR v Land Hessen

Court of Justice of the European Union, TR v Land Hessen, ECLI:EU:C:2024:785, 2024-09-26

Délibération 2018-325 du 11 octobre 2018

Délibération 2018-325 du 11 octobre 2018, 2018-10-11

Délibération SAN-2022-022 du 30 novembre 2022

Délibération SAN-2022-022 du 30 novembre 2022, 2022-11-30

Conseil d'État, 10ème chambre, 26/04/2022, 449284, Inédit au recueil Lebon

Conseil d'État, 10ème chambre, 26/04/2022, 449284, Inédit au recueil Lebon, 2022-04-26

Délibération SAN-2023-015 du 12 octobre 2023

Délibération SAN-2023-015 du 12 octobre 2023, 2023-10-12

Conseil d'État, 10ème - 9ème chambres réunies, 05/05/2025, 490202, Inédit au recueil Lebon

Conseil d'État, 10ème - 9ème chambres réunies, 05/05/2025, 490202, Inédit au recueil Lebon, 2025-05-05

Délibération SAN-2020-015 du 7 décembre 2020

Délibération SAN-2020-015 du 7 décembre 2020, 2020-12-07

Délibération SAN-2020-014 du 7 décembre 2020

Délibération SAN-2020-014 du 7 décembre 2020, 2020-12-07

AEPD (Spain) - EXP202213638

AEPD (Spain) - EXP202213638, 2025-01-27

AEPD (Spain) - EXP202213323

AEPD (Spain) - EXP202213323, 2024-01-19

Garante per la protezione dei dati personali (Italy) - 9991183

Garante per la protezione dei dati personali (Italy) - 9991183, 2024-02-08

Datatilsynet (Denmark) - 2021-32-2067

Datatilsynet (Denmark) - 2021-32-2067, 2021-10-18

HDPA (Greece) - 36/2022

HDPA (Greece) - 36/2022, 2022-08-03

LAG Düsseldorf - 3 Sa 285/23

LAG Düsseldorf - 3 Sa 285/23, 2023-11-28

BVwG - W108 2285546-1/22E

BVwG - W108 2285546-1/22E, 2024-10-25

Datatilsynet (Denmark) - 2021-442-14071

Datatilsynet (Denmark) - 2021-442-14071, 2022-06-22

LG Köln - 28 O 138/22

LG Köln - 28 O 138/22, 2023-05-31

CNIL (France) - SAN-2020-015

CNIL (France) - SAN-2020-015, 2020-12-07

APD/GBA (Belgium) - 07/2021

HDPA (Greece) - 4/2023

HDPA (Greece) - 4/2023, 2023-02-02

ANSPDCP (Romania) - 03.11.2023

Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1)

Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1), 2021-09-10

HDPA (Greece) - 55/2021

DPC (Ireland) - IN-22-7-3

DPC (Ireland) - IN-22-7-3, 2026-04-30

DSB (Austria) - 2024-0.641.771

DSB (Austria) - 2024-0.641.771, 2024-10-16

AEPD (Spain) - PS/00028/2022

ANSPDCP (Romania) - 13.11.2023

AEPD (Spain) - EXP202104873

HDPA (Greece) - 9/2024

HDPA (Greece) - 9/2024, 2024-02-28

AZOP (Croatia) - AZOP (Croatia)

Tietosuojavaltuutetun toimisto (Finland) - 1150/161/2021

Tietosuojavaltuutetun toimisto (Finland) - 1150/161/2021, 2021-12-07

APD/GBA (Belgium) - 115/2023

APD/GBA (Belgium) - 115/2023, 2023-08-16

Datatilsynet (Norway) - 20/03046

Datatilsynet (Norway) - 20/03046, 2021-12-06

APDCAT (Catalonia) - PS 54/2021

DPC - Inquiry into University College Dublin (IN-19-7-4)

DPC - Inquiry into University College Dublin (IN-19-7-4), 2020-12-17

AEPD (Spain) - EXP202208091

APD/GBA (Belgium) - 154/2025

APD/GBA (Belgium) - 154/2025, 2025-09-29

APD/GBA (Belgium) - 22/2020

APD/GBA (Belgium) - 22/2020, 2020-05-08

ANSPDCP (Romania) - Automobilus International SRL

AEPD (Spain) - EXP202307113

AEPD (Spain) - EXP202307113, 2025-07-25

DPC (Ireland) - IN-19-9-3

DPC (Ireland) - IN-19-9-3, 2024-11-22

DPC (Ireland) - DPC Case Reference: IN-19-9-5

DPC (Ireland) - DPC Case Reference: IN-19-9-5, 2022-03-14

ICO (UK) - DPP Law Ltd

ICO (UK) - DPP Law Ltd, 2025-04-14

VDAI (Lithuania) - 3R-252

VDAI (Lithuania) - 3R-252, 2026-02-13

ANSPDCP (Romania) - Softehnica S.R.L

ICO (UK) - Birthlink

ICO (UK) - Birthlink, 2025-06-24

DSB (Austria) - 2023-0.603.142

DSB (Austria) - 2023-0.603.142, 2023-12-12

AEPD (Spain) - PS/00187/2020

AEPD (Spain) - PS/00187/2020, 2020-11-16

Persónuvernd (Iceland) - Case no. 2021122409

Persónuvernd (Iceland) - Case no. 2021122409, 2022-11-09

APD/GBA (Belgium) - 110/2023

APD/GBA (Belgium) - 110/2023, 2023-08-09

CNIL (France) - SAN-2025-008

CNIL (France) - SAN-2025-008, 2025-09-18

ANSPDCP (Romania) Beko Romania SA

ANSPDCP (Romania) Beko Romania SA, 2025-03-03

DSB (Austria) - DSB-D550.1221

DSB (Austria) - DSB-D550.1221, 2025-09-04

APD/GBA (Belgium) - 62/2022

APD/GBA (Belgium) - 62/2022, 2022-04-29

ANSPDCP (Romania) - 27.12.2022

ANSPDCP (Romania) - Webrasoft SRL

ANSPDCP (Romania) - Webrasoft SRL, 2025-03-04

BGH - VI ZR 10/24

BGH - VI ZR 10/24, 2024-11-18

HmbBfDI (Hamburg) - Bußgeld wegen Fehlentsorgung bei Logistik-Unternehmen

Datainspektionen - DI-2019-9432

Datainspektionen - DI-2019-9432, 2020-12-10

APD/GBA (Belgium) - 102/2026

APD/GBA (Belgium) - 102/2026, 2026-05-12

AEPD (Spain) - PS/00552/2023

Datatilsynet (Norway) - NO - DPA - 24/01055-10

Datatilsynet (Norway) - NO - DPA - 24/01055-10, 2025-03-26

ANSPDCP (Romania) - 19.01.2026

ANSPDCP (Romania) - Fine against Agricola International SA

Garante per la protezione dei dati personali (Italy) 10105764

Garante per la protezione dei dati personali (Italy) 10105764, 2024-12-24

ANSPDCP (Romania) - Comunicat Presa 09 12 2022

ANSPDCP (Romania) - Comunicat Presa 09 12 2022, 2022-11-30

APD/GBA (Belgium) - 18/2020

APD/GBA (Belgium) - 18/2020, 2020-04-28

Datatilsynet (Denmark) - 2020-442-8866

Rb. Midden-Nederland - UTR 19/1627

Rb. Midden-Nederland - UTR 19/1627, 2023-06-09

DPC - In the matter of Twitter International Company (IN-19-1-1)

DPC - In the matter of Twitter International Company (IN-19-1-1), 2020-12-09

Datatilsynet (Norway) - 20/02137

HDPA (Greece) - 16/2024

HDPA (Greece) - 16/2024, 2024-05-27

LG Augsburg - 022 O 2669/22

LG Augsburg - 022 O 2669/22, 2023-06-09

DPC - Health Service Executive - August 2020 (IN-19-9-1)

DPC - Health Service Executive - August 2020 (IN-19-9-1), 2020-08-18

Rb. Noord-Holland - 8117599 CV EXPL 19-16066

Rb. Noord-Holland - 8117599 CV EXPL 19-16066, 2020-10-28

ANSPDCP (Romania) - FINE AGAINST SSG SELECT SOLUTIONS

OLG Hamm - 7 U 19/23

OLG Hamm - 7 U 19/23, 2023-08-15

APD/GBA (Belgium) - 29/2023

APD/GBA (Belgium) - 29/2023, 2023-03-17

AP (The Netherlands) - 23.09.2021

AP (The Netherlands) - 23.09.2021, 2021-09-23

AEPD (Spain) - PS/00464/2020

LG Köln - 14 O 472/23

LG Köln - 14 O 472/23, 2025-01-07

ANSPDCP (Romania) - Vodafone Romania S.A.

OLG Braunschweig - Az.: 2 U 71/24

AP (The Netherlands) - 16.06.2020

AP (The Netherlands) - 16.06.2020, 2021-05-11

LG Duisburg - 10 O 126/22

LG Duisburg - 10 O 126/22, 2023-06-14

Datatilsynet (Denmark) - 2020-441-4364

Datatilsynet (Denmark) - 2020-441-4364, 2020-11-04

CNIL (France) - SAN-2023-008

AEPD (Spain) - PS/00268/2022

AEPD (Spain) - PS/00420/2021

ANSPDCP (Romania) - AUR Data Breach and Unlawful Processing

Datatilsynet (Denmark) - 2019-441-3399

Datatilsynet (Denmark) - 2019-441-3399, 2020-03-05

Datatilsynet (Denmark) - 2021-31-4596

ANSPDCP (Romania) - Actamedica SRL

Rb. Den Haag - SGR 20/1516

Rb. Den Haag - SGR 20/1516, 2021-03-31

CNIL (France) - SAN-2026-001

CNIL (France) - SAN-2026-001, 2026-01-08

AP (The Netherlands) - Boete datalek PVV Overijssel

HDPA (Greece) - 44/2025

HDPA (Greece) - 44/2025, 2025-12-31

ANSPDCP (Romania) - fine against AG-BROKER ASIGURARE S.R.L

EDPB - Binding Decision 1/2020 - 'Twitter'

EDPB - Binding Decision 1/2020 - 'Twitter', 2020-11-09

DPC (Ireland) - Meta "View-as" feature

ICO (UK) - HIV Scotland

ICO (UK) - HIV Scotland, 2021-10-18

HDPA (Greece) - 27/2025

HDPA (Greece) - 27/2025, 2025-06-25

ANSPDCP (Romania) - Valoris Center S.R.L.

DPC (Ireland) - City of Dublin Education and Training Board (CDETB)

ANSPDCP (Romania) - NTT Data Romania SA

CNIL (France) - SAN-2023-082

CNIL (France) - SAN-2023-082, 2023-07-20

AZOP (Croatia) - Decision 13-09-2024

APD/GBA (Belgium) - 64/2025

APD/GBA (Belgium) - 64/2025, 2025-04-01

CNIL (France) - CNIL2326891X

CNIL (France) - CNIL2326891X, 2023-07-20

AEPD (Spain) - PS/00179/2020

Rb. Midden-Nederland - C/16/481957/KG ZA 19-357

Rb. Midden-Nederland - C/16/481957/KG ZA 19-357, 2019-10-25

BAC (Bulgaria) - 2606/2021

CNPD (Portugal) - Deliberação 2019/494

CNPD (Portugal) - Deliberação 2019/494, 2019-09-03

ANSPDCP (Romania) - SC Travel Planner SRL

Datatilsynet (Norway) - 20/02042

Datatilsynet (Norway) - 20/02042, 2021-01-04

LG München I - 5 O 5853/22

ANSPDCP (Romania) - S.P.E.E.H. Hidroelectrica SA

HDPA (Greece) - 47/2022

VDAI (Lithuania) - VDAI vs UAB Prime Leasing

VDAI (Lithuania) - VDAI vs UAB Prime Leasing, 2021-11-29

APDCAT (Catalonia) - PS93/2024

ICO (UK) - Mermaids

ICO (UK) - Mermaids, 2021-07-05

ANSPDCP (Romania) - 18.06.2026

AEPD (Spain) - PS/00389/2019

Rb. Zeeland-West-Brabant - C/02/387229

Rb. Zeeland-West-Brabant - C/02/387229, 2022-09-21

BVwG - W211 2231475-1

BVwG - W211 2231475-1, 2021-10-20

LG Lübeck - 15 O 74/22

LG Lübeck - 15 O 74/22, 2023-05-25

HDPA (Greece) - 6/2026

HDPA (Greece) - 6/2026, 2026-04-21

ANSPDCP (Romania) - fine against Blue Projects SRL

Persónuvernd (Iceland) - 2021061419

Persónuvernd (Iceland) - 2021061419, 2021-09-27

CE - 490202

CE - 490202, 2025-05-05

Datatilsynet (Denmark) - 2019-41-0028

ANSPDCP (Romania) - 07.12.2023

AEPD (Spain) - PS/00080/2022

HDPA (Greece) - 33/2025

HDPA (Greece) - 33/2025, 2025-07-21

DPC (Ireland) - Inquiry concerning the University of Limerick (IN-19-7-1)

DPC (Ireland) - Inquiry concerning the University of Limerick (IN-19-7-1), 2025-12-10

VDAI (Lithuania) - 3R-1029

VDAI (Lithuania) - 3R-1029, 2025-08-05

APD/GBA (Belgium) - 53/2020

APD/GBA (Belgium) - 53/2020, 2020-09-01

BVwG - W274 2302843-1

BVwG - W274 2302843-1, 2026-04-30

OLG Dresden - 4 U 808/24

OLG Dresden - 4 U 808/24, 2024-12-10

ANSPDCP (Romania) - 07.11.2025

Datatilsynet (Denmark) - 2020-442-8862

Datatilsynet (Denmark) - 2020-442-8862, 2022-02-18

AEPD (Spain) - EXP202305979

AEPD (Spain) - EXP202305979, 2025-03-14

Commissioner (Cyprus) - 12.10.001.011.001

Commissioner (Cyprus) - 12.10.001.011.001, 2020-05-04

AEPD (Spain) - PS/00254/2019

ANSPDCP (Romania) - Unicredit Consumer Financing

VDAI (Lithuania) - Decision No. 3R-1700

APD/GBA (Belgium) - 170/2023

APD/GBA (Belgium) - 170/2023, 2023-12-20

OLG Wien - 13R3/24t

OLG Wien - 13R3/24t, 2025-03-21

AEPD (Spain) - EXP202200399

Commissioner (Cyprus) - 11.17.001.008.001

Commissioner (Cyprus) - 11.17.001.008.001, 2020-06-17

ANSPDCP (Romania) - 12.01.2023

ANSPDCP (Romania) - fine against Renault Commercial Roumanie SRL

HDPA (Greece) - Decision 18/2024

APD/GBA (Belgium) - 33/2022

APD/GBA (Belgium) - 33/2022, 2022-03-10

LG Deggendorf - 33 O 461/22

LG Deggendorf - 33 O 461/22, 2023-06-20

HDPA (Greece) - 37/2024

HDPA (Greece) - 37/2024, 2024-07-24

HDPA (Greece) - 18/2024

HDPA (Greece) - 18/2024, 2024-07-05

OLG Stuttgart - 9 U 34/21

OLG Stuttgart - 9 U 34/21, 2021-03-31

CNIL (France) - SAN-2020-008

CNIL (France) - SAN-2020-008, 2020-11-18

Datatilsynet (Denmark) - 2021-441-9356

Datatilsynet (Denmark) - 2021-441-9356, 2021-11-04

Datatilsynet (Norway) - 21/03126

Datatilsynet (Norway) - 21/03126, 2023-03-08

ICO (UK) - Cabinet Office

ICO (UK) - Cabinet Office, 2021-11-15

ANSPDCP (Romania) - 31.01.2023

LG Ravensburg - 2 O 228/22

LG Ravensburg - 2 O 228/22, 2023-06-13

ICO (UK) - Monetary Penalty Notice to Easylife Limited

ICO (UK) - Monetary Penalty Notice to Easylife Limited, 2022-10-04

Garante per la protezione dei dati personali (Italy) - 9991064

Garante per la protezione dei dati personali (Italy) - 9991064, 2024-02-08

DPC - Tusla Child and Family Agency

DPC - Tusla Child and Family Agency, 2020-05-21

IP (Slovenia) - 0612-91/2025/40

IP (Slovenia) - 0612-91/2025/40, 2026-03-04

AEPD (Spain) - PS/00152/2020

LG Essen - 6 O 190/21

LG Essen - 6 O 190/21, 2021-09-23

ANSPDCP (Romania) - Bitdefender Srl

CNIL (France) - SAN-2020-014

CNIL (France) - SAN-2020-014, 2020-12-07

CNIL (France) - SAN-2023-015

CNIL (France) - SAN-2023-015, 2023-10-12

ANSPDCP (Romania) - Omniasig Vienna Insurance Group S.A.

AEPD (Spain) - PS/00287/2020

AEPD (Spain) - PS/00287/2020, 2020-12-02

LG Bielefeld - 19 O 147/22

LG Bielefeld - 19 O 147/22, 2023-03-10

VDAI (Lithuania) - Nr. 3R-206 (2.13-1 E)

HDPA (Greece) - 44/2019

HDPA (Greece) - 44/2019, 2019-12-19

ANSPDCP (Romania) - Compania Națională Poșta Română

ANSPDCP (Romania) - Compania Națională Poșta Română, 2020-07-15

APD/GBA (Belgium) - 05/2021

Datatilsynet (Denmark) - 2020-432-0037

IDPC (Malta) - CDP/DBN/31/2020

IDPC (Malta) - CDP/DBN/31/2020, 2022-01-17

HDPA (Greece) - 6/2022

HDPA (Greece) - 6/2022, 2022-04-04

VDAI (Lithuania) - 3R-537

VDAI (Lithuania) - 3R-537, 2025-05-15

ANSPDCP (Romania) - 30.12.2025

ANSPDCP (Romania) - 30.12.2025, 2025-12-30

VDAI (Lithuania) - 3R-1143

VDAI (Lithuania) - 3R-1143, 2026-06-19

DPC (Ireland) - DPC ref: IN-20-4-1

DPC (Ireland) - DPC ref: IN-20-4-1, 2021-12-02

APD/GBA (Belgium) - 203/2025

APD/GBA (Belgium) - 203/2025, 2025-12-08

OLG Köln - 15 U 108/23

OLG Köln - 15 U 108/23, 2023-12-07

AEPD (Spain) - EXP202400055

AEPD (Spain) - EXP202400055, 2024-12-02

CNIL (France) - SAN-2026-002

CNIL (France) - SAN-2026-002, 2026-01-08

CNIL (France) - SAN-2022-022

CNIL (France) - SAN-2022-022, 2022-11-30

IP (Slovenia) - SI – 07101-5-2023-16

IP (Slovenia) - SI – 07101-5-2023-16, 2023-11-13

AP (The Netherlands) - 10.12.2020 (Booking.com)

AP (The Netherlands) - 10.12.2020 (Booking.com), 2020-12-10

APD/GBA (Belgium) - 34/2020

APD/GBA (Belgium) - 34/2020, 2020-06-23

HDPA (Greece) - 13/2025

APD/GBA (Belgium) - 101/2022

APD/GBA (Belgium) - 101/2022, 2022-06-03

Datatilsynet (Denmark) - Civilstyrelsen indstilles til bøde

AP (The Netherlands) - 26.11.2020

AP (The Netherlands) - 26.11.2020, 2020-11-26

Garante per la protezione dei dati personali (Italy) - Provvedimento del 9 maggio 2024

Garante per la protezione dei dati personali (Italy) - Provvedimento del 9 maggio 2024, 2024-05-09

HDPA (Greece) - 35/2023

HDPA (Greece) - 35/2023, 2023-11-08

NAIH (Hungary) - NAIH-2894-3/2021

NAIH (Hungary) - NAIH-2894-3/2021, 2021-03-14

Persónuvernd (Iceland) - 2022081293

Persónuvernd (Iceland) - 2022081293, 2023-03-10

AEPD (Spain) - EXP202104006

AEPD (Spain) - EXP202104006, 2023-09-13

DPC (Ireland) - Meta Ireland

DPC (Ireland) - Meta Ireland, 2024-09-27

KHO - KHO:2024:115

KHO - KHO:2024:115, 2024-10-31

AEPD (Spain) - EXP202212956

AEPD (Spain) - EXP202212956, 2025-01-21

Meta Platforms Ireland Ltd v Data Protection Commissioner (Approved)

Meta Platforms Ireland Ltd v Data Protection Commissioner (Approved) [2025] IEHC 2025IEHC631, 2025-10-31

Inquiry into Meta Platforms Ireland Limited

Inquiry into Meta Platforms Ireland Limited, 2024-09-26

Inquiry into Slane Credit Union

Inquiry into Slane Credit Union, 2022-01-26

Inquiry into Tusla Child and Family Agency

Inquiry into Tusla Child and Family Agency, 2020-05-21

Inquiry concerning the University of Limerick

Inquiry concerning the University of Limerick, 2025-12-10

Inquiry into Bank of Ireland Group plc

Inquiry into Bank of Ireland Group plc, 2022-03-14

Inquiry Concerning Twitter International Company (‘TIC’)

Inquiry Concerning Twitter International Company (‘TIC’), 2020-12-09

Inquiry into Tusla Child and Family Agency

Inquiry into Tusla Child and Family Agency, 2020-04-07

Inquiry into the Teaching Council

Inquiry into the Teaching Council, 2021-12-02

Inquiry into the Department of Employment Affairs and Social Protection

Inquiry into the Department of Employment Affairs and Social Protection, 2021-05-10

Inquiry into Tusla Child and Family Agency

Inquiry into Tusla Child and Family Agency, 2020-08-12

Inquiry into City of Dublin Education and Training Board (CDETB)

Inquiry into City of Dublin Education and Training Board (CDETB), 2025-06-23

Inquiry into Permanent TSB (PTSB)

Inquiry into Permanent TSB (PTSB), 2026-04-30

Inquiry concerning 12 Facebook personal data breaches

Inquiry concerning 12 Facebook personal data breaches, 2022-03-15

Inquiries concerning the Health Service Executive

Inquiries concerning the Health Service Executive, 2020-08-18

Inquiry into University College Dublin

Inquiry into University College Dublin, 2020-06-17

Inquiries into Meta Platforms Ireland Limited (Token Breach)

Inquiries into Meta Platforms Ireland Limited (Token Breach), 2024-12-12

Inquiry into the Irish Credit Bureau DAC

Inquiry into the Irish Credit Bureau DAC, 2021-03-23

Woo-besluit: Google Analytics, verwerkersovereenkomst en connected cars

Woo-besluit: Google Analytics, verwerkersovereenkomst en connected cars, 2025-09-09

Boete OLVG

Boete OLVG, 2021-02-11

Besluit afwijzen vergunning Fraudehelpdesk

Besluit afwijzen vergunning Fraudehelpdesk, 2019-11-04

Woo-besluit: Informatie klachtbehandeling en toezichtstrategie

Woo-besluit: Informatie klachtbehandeling en toezichtstrategie, 2025-03-11

Protocol PIFI 2026

Protocol PIFI 2026, 2026-03-31

Woo-besluit: Gebruik clouddienst van Amazon

Woo-besluit: Gebruik clouddienst van Amazon, 2025-07-10

Boete Uber datalek

Boete Uber datalek, 2018-11-29

Boete datalek PVV Overijssel

Boete datalek PVV Overijssel, 2021-05-11

Woo-besluit: Informatie datalekken

Woo-besluit: Informatie datalekken, 2025-07-15

Boete Booking.com

Boete Booking.com, 2021-03-31

Woo-besluit: documenten over onder meer gepast onderzoek

Woo-besluit: documenten over onder meer gepast onderzoek, 2026-02-11

Boete Transavia

Boete Transavia, 2021-11-12

ECLI:NL:RBDHA:2026:15444 Rechtbank Den Haag , 12-02-2026 / AWB - 25 _ 89

ECLI:NL:RBDHA:2026:15444 Rechtbank Den Haag , 12-02-2026 / AWB - 25 _ 89, 2026-02-12

ECLI:NL:PHR:2023:823 Parket bij de Hoge Raad , 21-07-2023 / 23/01128

ECLI:NL:PHR:2023:823 Parket bij de Hoge Raad , 21-07-2023 / 23/01128, 2024-05-24

ECLI:NL:PHR:2025:652 Parket bij de Hoge Raad , 30-05-2025 / Bijlage 24/04262 24/04264 en 24/04267

ECLI:NL:PHR:2025:652 Parket bij de Hoge Raad , 30-05-2025 / Bijlage 24/04262 24/04264 en 24/04267, 2026-04-17

ECLI:NL:RBMNE:2023:3539 Rechtbank Midden-Nederland , 09-06-2023 / UTR 19/1627

ECLI:NL:RBMNE:2023:3539 Rechtbank Midden-Nederland , 09-06-2023 / UTR 19/1627, 2023-06-09

ECLI:NL:RBMNE:2021:5147 Rechtbank Midden-Nederland , 30-09-2021 / UTR 21/3385

ECLI:NL:RBMNE:2021:5147 Rechtbank Midden-Nederland , 30-09-2021 / UTR 21/3385, 2021-09-30

ECLI:NL:RBDHA:2021:3090 Rechtbank Den Haag , 31-03-2021 / AWB - 20 _ 1516

ECLI:NL:RBDHA:2021:3090 Rechtbank Den Haag , 31-03-2021 / AWB - 20 _ 1516, 2021-03-31