GDPR m.33 Kaynak Fihristi

Guidelines 9/2022 on personal data breach notification under GDPR

European Data Protection Board, Guidelines 9/2022 on personal data breach notification under GDPR

Commission Staff Working Document: Ex-post REFIT evaluation of the ePrivacy Directive 2002/58/EC

European Commission, Commission Staff Working Document: Ex-post REFIT evaluation of the ePrivacy Directive 2002/58/EC

Working Document on Binding Corporate Rules for Processors (wp257rev.01)

Article 29 Data Protection Working Party, Working Document on Binding Corporate Rules for Processors (wp257rev.01)

General Summary Fablab

Avis n° 30/2018 du 11 avril 2018

Avis n° 30/2018 du 11 avril 2018, 2018-01-01

Avis n° 66/2018 du 25 juillet 2018

Avis n° 66/2018 du 25 juillet 2018, 2018-01-01

Avis n° 17/2017 du 12 avril 2017

Avis n° 17/2017 du 12 avril 2017, 2017-01-01

Annexe : Avis sur l’avant-projet de loi portant modification de la loi APD

Annexe : Avis sur l’avant-projet de loi portant modification de la loi APD, 2022-01-01

Avis n° 16/2019 du 6 février 2019

Avis n° 16/2019 du 6 février 2019, 2019-01-01

Rapport annuel 2024

Rapport annuel 2024, 2025-01-01

Avis n° 98/2019 du 3 avril 2019

Avis n° 98/2019 du 3 avril 2019, 2019-01-01

PROTOCOLE DE COOPÉRATION ENTRE LES AUTORITÉS DE CONTRÔLE FÉDÉRALES BELGES EN MATIÈRE DE PROTECTION DES DONNÉES

PROTOCOLE DE COOPÉRATION ENTRE LES AUTORITÉS DE CONTRÔLE FÉDÉRALES BELGES EN MATIÈRE DE PROTECTION DES DONNÉES, 2020-01-01

Avis n° 14/2018 du 28 février 2018

Avis n° 14/2018 du 28 février 2018, 2018-01-01

Rapport Big Data

Rapport Big Data, 2017-01-01

Avis n° 84/2018 du 14 septembre 2018

Avis n° 84/2018 du 14 septembre 2018, 2018-01-01

Recommandation n° 04/2017 du 24 mai 2017

Recommandation n° 04/2017 du 24 mai 2017, 2017-01-01

13.12.2019 - Report on Experience Gained in the Implementation of the GDPR

13.12.2019 - Erfahrungsbericht der unabhängigen Datenschutzaufsichtsbehörden des Bundes und der Länder zur Anwendung der DS-GVO

Orientierungshilfe zu ausgewählten Fragestellungen des neuen Onlinezugangsgesetzes (OZG) (Anwendungshilfe für Stellen, die (länderübergreifende) Onlinedienste nach OZG betreiben oder nutzen)

Orientierungshilfe zu ausgewählten Fragestellungen des neuen Onlinezugangsgesetzes (OZG) (Anwendungshilfe für Stellen, die (länderübergreifende) Onlinedienste nach OZG betreiben oder nutzen), 2025-12-01

Einsatz von digitalen Diensten zur Kontaktnachverfolgung anlässlich von Veranstaltungs-, Einrichtungs-, Restaurants- und Geschäftsbesuchen zur Verhinderung der Verbreitung von Covid-19

Orientierungshilfe der DSK zu ausgewählte Fragestellungen des neuen Onlinezugangsgesetzes

Orientierungshilfe der DSK zu ausgewählte Fragestellungen des neuen Onlinezugangsgesetzes, 2024-11-01

Orientierungshilfe: Anforderungen an Anbieter von Online-Diensten zur Zugangssicherung

Gyldigt samtykke i forbindelse med ”Consent or Pay”-løsninger implementeret af store onlineplatforme (Udtalelse 08/2024)

Behandling af personoplysninger baseret på artikel 6, stk. 1, litra f (Vejledning 1/2024)

Opinion 28/2022 on the Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

EDPB Annual Report 2022

Opinion 27/2024 on the Brand Compliance criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

EU-US Data Privacy Framework FAQ for European businesses

Law & Compliance in AI Security & Data Protection

Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria

Contribution of the EDPB to the evaluation of the GDPR under Article 97

Guidelines 07/2020 on the concepts of controller and processor in the GDPR

European Data Protection Board, Guidelines 07/2020 on the concepts of controller and processor in the GDPR

EDPB-EDPS Joint Opinion 01/2025 on the Proposal for a Regulation on simplification measures for SMEs and SMCs, in particular the record-keeping obligation under Art. 30(5) GDPR

Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH

Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR

Opinion 1/2022 on the draft decision of the Luxembourg Supervisory Authority regarding the GDPR – CARPA certification criteria

EDPB Annual Report 2021

EDPB feedback on the candidate European Cybersecurity Certification Scheme for Cloud Services (EUCS)

EU-U.S. Data Privacy Framework F.A.Q. for European businesses - version 2.0

Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR)

Opinion 22/2024 on certain obligations following from the reliance on processor(s) and sub-processor(s)

Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities

Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR)

Report on the use of SPE external experts

Opinion 19/2024 on the EuroPrise criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR)

EDPB Annual Report 2023

Guidelines 03/2022 on deceptive design patterns in social media platform interfaces: how to recognise and avoid them

Contribution of the EDPB to the report on the application of the GDPR under Article 97 - 2023

EDPB-EDPS Joint Opinion 1/2021 on standard contractual clauses between controllers and processors

Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR

EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (Digital Omnibus)

EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)

Guidelines 06/2022 on the practical implementation of amicable settlements

European Data Protection Board, Guidelines 06/2022 on the practical implementation of amicable settlements

Opinion 31/2020 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR

EDPB Annual Report 2024

One-Stop-Shop case digest on Security of Processing and Data Breach Notification

EDPB-EDPS Joint Opinion 2/2021 on standard contractual clauses for the transfer of personal data to third countries

Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR

Report of the work undertaken by the ChatGPT Taskforce

Internal EDPB Document 6/2020 on preliminary steps to handle a complaint: admissibility and vetting of complaints

Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

European Data Protection Board, Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)

Guidelines 04/2022 on the calculation of administrative fines under the GDPR

European Data Protection Board, Guidelines 04/2022 on the calculation of administrative fines under the GDPR

EDPBI:DE:OSS:D:2021:222 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:222 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-05-17

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-10

EDPBI:DK:OSS:D:2023:734 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DK:OSS:D:2023:734 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-05-02

EDPBI:DE:OSS:D:2021:211 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:211 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-04-23

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2024:1411 — FR SA final decision (Article 24 (Responsibility of the controller), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-08-19

EDPBI:RO:OSS:D:2023:760 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:RO:OSS:D:2023:760 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-04-24

EDPBI:DE:OSS:D:2019:16 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:16 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-04-03

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing)), 2023-06-30

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject)), 2023-03-08

EDPBI:AT:OSS:D:2021:264 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:AT:OSS:D:2021:264 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-08-04

EDPBI:RO:OSS:D:2023:776 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:RO:OSS:D:2023:776 — RO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-07-18

EDPBI:FR:OSS:D:2025:3488 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3488 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-05-27

EDPBI:DE:OSS:D:2020:162 — DE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:162 — DE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-11-11

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-09-29

EDPBI:DK:OSS:D:2021:190 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2021:190 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-01-27

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-07-20

EDPBI:AT:OSS:D:2023:689 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:689 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-06-21

EDPBI:DE:OSS:D:2021:293 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:293 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-11-16

EDPBI:FR:OSS:D:2021:201 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:201 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-03-31

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-06-17

EDPBI:DE:OSS:D:2020:133 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:133 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-08-05

EDPBI:SE:OSS:D:2023:774 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2023:774 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 32 (Security of processing)), 2023-05-30

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:LT:OSS:D:2021:298 — LT SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-11-29

EDPBI:DE:OSS:D:2022:349 — DK SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2022:349 — DK SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-03-13

EDPBI:DE:OSS:D:2020:132 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:132 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-08-05

EDPBI:DE:OSS:D:2019:4 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:4 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-01-25

EDPBI:FR:OSS:D:2021:169 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FR:OSS:D:2021:169 — FR SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-01-06

EDPBI:FR:OSS:D:2021:313 — FR SA final decision (Article 28 (Processor), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:313 — FR SA final decision (Article 28 (Processor), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-12-28

EDPBI:FR:OSS:D:2024:1433 — FR SA final decision (Article 15 (Right of access by the data subject), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2024:1433 — FR SA final decision (Article 15 (Right of access by the data subject), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-09-04

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2019-05-16

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-07

EDPBI:DE:OSS:D:2020:99 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:99 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-04-07

EDPBI:ES:OSS:D:2021:277 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:ES:OSS:D:2021:277 — ES SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-09-15

EDPBI:DK:OSS:D:2020:85 — DK SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2020:85 — DK SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-02-05

EDPBI:NO:OSS:D:2021:219 — NO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:NO:OSS:D:2021:219 — NO SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-05-12

EDPBI:DE:OSS:D:2022:468 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2022:468 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-09-09

EDPBI:IT:OSS:D:2022:620 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:IT:OSS:D:2022:620 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-10-20

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-06-16

EDPBI:AT:OSS:D:2023:767 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:767 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-05-16

EDPBI:SE:OSS:D:2024:1529 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SE:OSS:D:2024:1529 — SE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-11-18

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing))

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing)), 2020-04-15

EDPBI:LU:OSS:D:2025:1608 — LU SA final decision (Article 4 (Definitions), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:LU:OSS:D:2025:1608 — LU SA final decision (Article 4 (Definitions), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2025-01-17

EDPBI:SE:OSS:D:2025:1589 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SE:OSS:D:2025:1589 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2025-01-08

EDPBI:DE:OSS:D:2020:103 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:103 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-04-30

EDPBI:DE:OSS:D:2020:82 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:82 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-01-27

EDPBI:DE:OSS:D:2020:124 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:124 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-07-13

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor))

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor)), 2023-09-13

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing)), 2021-11-10

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2023-01-30

EDPBI:DK:OSS:D:2022:380 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2022:380 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-06-13

EDPBI:DE:OSS:D:2021:204 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:204 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-24

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-08-14

EDPBI:ES:OSS:D:2021:239 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:ES:OSS:D:2021:239 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-02-18

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller))

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller)), 2024-07-17

EDPBI:SE:OSS:D:2022:465 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:SE:OSS:D:2022:465 — SE SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-08-18

EDPBI:FR:OSS:D:2021:297 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2021:297 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-11-22

EDPBI:HU:OSS:D:2020:116 — HU SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:HU:OSS:D:2020:116 — HU SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-06-23

EDPBI:DE:OSS:D:2021:197 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:197 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-24

EDPBI:GB:OSS:D:2020:80 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2020:80 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-01-10

EDPBI:RO:OSS:D:2024:1302 — RO SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:RO:OSS:D:2024:1302 — RO SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-22

EDPBI:CZ:OSS:D:2019:44 — CZ SA final decision (Article 32 (Security of processing), Article 35 (Data protection impact assessment))

EDPBI:CZ:OSS:D:2019:44 — CZ SA final decision (Article 32 (Security of processing), Article 35 (Data protection impact assessment)), 2019-08-26

EDPBI:DE:OSS:D:2019:75 — BE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2019:75 — BE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-12-17

EDPBI:FI:OSS:D:2024:1295 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FI:OSS:D:2024:1295 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-29

EDPBI:FI:OSS:D:2024:1296 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FI:OSS:D:2024:1296 — FI SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-05-30

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-09-03

EDPBI:IT:OSS:D:2024:1122 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:IT:OSS:D:2024:1122 — IT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-01-24

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-08-07

EDPBI:HU:OSS:D:2021:185 — HU SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:HU:OSS:D:2021:185 — HU SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-02-04

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-02-17

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-09

EDPBI:DE:OSS:D:2020:136 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:136 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-09-04

EDPBI:FR:OSS:D:2022:437 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2022:437 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-07-28

EDPBI:DK:OSS:D:2021:288 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DK:OSS:D:2021:288 — DK SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-10-26

EDPBI:DE:OSS:D:2020:125 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:125 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-07-13

EDPBI:GB:OSS:D:2019:24 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2019:24 — GB SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2019-06-22

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-10-16

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2023-06-08

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing))

EDPBI:FR:OSS:D:2024:1440 — FR SA final decision (Article 32 (Security of processing)), 2024-09-18

EDPBI:DE:OSS:D:2021:187 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2021:187 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2021-03-01

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-12-19

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-06-18

EDPBI:DE:OSS:D:2020:114 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:DE:OSS:D:2020:114 — DE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-06-16

EDPBI:FR:OSS:D:2024:1106 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:FR:OSS:D:2024:1106 — FR SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2024-01-16

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-08-20

Memoria de Responsabilidad Social

Memoria de Responsabilidad Social, 2020-09-14

Guía para la notificación de brechas de datos personales

Guía para la notificación de brechas de datos personales, 2021-06-25

Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges - Judgment) [2025] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges) EU:C:2025:303, 2025-04-30

ECLI:EU:C:2024:859

Case C-313/23 EU:C:2024:859, Opinion of AG Pikamäe

Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors - Opinion) FR [2024] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors) FR, 2024-10-04

ECLI:EU:C:2026:579

Case C-474/24 EU:C:2026:579

TR v Land Hessen

Court of Justice of the European Union, TR v Land Hessen, ECLI:EU:C:2024:785, 2024-09-26

TR v Land Hessen

Case C-768/21 TR v Land Hessen EU:C:2024:291, Opinion of AG Pikamäe, 2024-04-11

FAQs on the CRA implementation (PDF)

FAQs on the CRA implementation (PDF), 2025-12-02

Implementing the Data Governance Act – guidance document

Implementing the Data Governance Act – guidance document, 2024-09-24

Regulation (EU) 2018/1240 of the European Parliament and of the Council of 12 September 2018 establishing a European Travel Information and Authorisation System (ETIAS) and amending Regulations (EU) No 1077/2011, (EU) No 515/2014, (EU) 2016/399, (EU) 2016/1624 and (EU) 2017/2226

Commission Implementing Regulation (EU) 2024/607 of 15 February 2024 on the practical and operational arrangements for the functioning of the information sharing system pursuant to Regulation (EU) 2022/2065 of the European Parliament and of the Council ( Digital Services Act )

Commission Implementing Regulation (EU) 2024/607 of 15 February 2024 on the practical and operational arrangements for the functioning of the information sharing system pursuant to Regulation (EU) 2022/2065 of the European Parliament and of the Council (Digital Services Act)

Regulation (EU) 2018/1861 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of border checks, and amending the Convention implementing the Schengen Agreement, and amending and repealing Regulation (EC) No 1987/2006

Commission Implementing Decision (EU) 2021/858 of 27 May 2021 amending Implementing Decision (EU) 2017/253 as regards alerts triggered by serious cross-border threats to health and for the contact tracing of passengers identified through Passenger Locator Forms (Text with EEA relevance)

Regulation (EU) 2024/1358 of the European Parliament and of the Council of 14 May 2024 on the establishment of Eurodac for the comparison of biometric data in order to effectively apply Regulations (EU) 2024/1351 and (EU) 2024/1350 of the European Parliament and of the Council and Council Directive 2001/55/EC and to identify illegally staying third-country nationals and stateless persons and on requests for the comparison with Eurodac data by Member States’ law enforcement authorities and Europol for law enforcement purposes, amending Regulations (EU) 2018/1240 and (EU) 2019/818 of the European Parliament and of the Council and repealing Regulation (EU) No 603/2013 of the European Parliament and of the Council

ANNEX Standard contractual clauses

Commission Implementing Decision (EU) 2019/1269 of 26 July 2019 amending Implementing Decision 2014/287/EU setting out criteria for establishing and evaluating European Reference Networks and their Members and for facilitating the exchange of information and expertise on establishing and evaluating such Networks (Text with EEA relevance)

Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES) to register entry and exit data and refusal of entry data of third-country nationals crossing the external borders of the Member States and determining the conditions for access to the EES for law enforcement purposes, and amending the Convention implementing the Schengen Agreement and Regulations (EC) No 767/2008 and (EU) No 1077/2011

Regulation (EU) 2019/817 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of borders and visa and amending Regulations (EC) No 767/2008, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1726 and (EU) 2018/1861 of the European Parliament and of the Council and Council Decisions 2004/512/EC and 2008/633/JHA

Commission Implementing Decision (EU) 2026/179 of 26 January 2026 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data by Brazil (notified under document C(2026) 373) (Text with EEA relevance)

Regulation (EU) 2021/1134 of the European Parliament and of the Council of 7 July 2021 amending Regulations (EC) No 767/2008, (EC) No 810/2009, (EU) 2016/399, (EU) 2017/2226, (EU) 2018/1240, (EU) 2018/1860, (EU) 2018/1861, (EU) 2019/817 and (EU) 2019/1896 of the European Parliament and of the Council and repealing Council Decisions 2004/512/EC and 2008/633/JHA, for the purpose of reforming the Visa Information System

Commission Implementing Regulation (EU) 2023/2117 of 12 October 2023 laying down the necessary rules and detailed requirements for the functioning and management of a repository of information pursuant to Regulation (EU) 2018/1139 of the European Parliament and of the Council (Text with EEA relevance)

Regulation (EU) 2019/818 of the European Parliament and of the Council of 20 May 2019 on establishing a framework for interoperability between EU information systems in the field of police and judicial cooperation, asylum and migration and amending Regulations (EU) 2018/1726, (EU) 2018/1862 and (EU) 2019/816

Regulation (EU) 2018/1862 of the European Parliament and of the Council of 28 November 2018 on the establishment, operation and use of the Schengen Information System (SIS) in the field of police cooperation and judicial cooperation in criminal matters, amending and repealing Council Decision 2007/533/JHA, and repealing Regulation (EC) No 1986/2006 of the European Parliament and of the Council and Commission Decision 2010/261/EU

Commission Implementing Regulation (EU) 2021/1772 of 28 June 2021 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate protection of personal data by the United Kingdom (notified under document C(2021)4800) (Text with EEA relevance)

52025PC0837

Guide de la sécurité des données personnelles 2024

Guide de la sécurité des données personnelles 2024, 2026-05-01

Recommandation relative aux applications mobiles - Modifiée

Recommandation relative aux applications mobiles - Modifiée, 2025-04-01

Guide pratique pour les médecins par le CNOM et la CNIL

Guide tiers autorisés

Rapport annuel 2024 de la CNIL

Rapport annuel 2024 de la CNIL, 2025-04-01

Délibération 2018-325 du 11 octobre 2018

Délibération 2018-325 du 11 octobre 2018, 2018-10-11

Délibération SAN-2022-022 du 30 novembre 2022

Délibération SAN-2022-022 du 30 novembre 2022, 2022-11-30

Conseil d'État, 10ème chambre, 26/04/2022, 449284, Inédit au recueil Lebon

Conseil d'État, 10ème chambre, 26/04/2022, 449284, Inédit au recueil Lebon, 2022-04-26

Code de la défense. — Article L4123-9-1

Code de la défense. — Article L4123-9-1, 2018-05-25

Délibération SAN-2023-015 du 12 octobre 2023

Délibération SAN-2023-015 du 12 octobre 2023, 2023-10-12

Conseil d'État, 10ème - 9ème chambres réunies, 05/05/2025, 490202, Inédit au recueil Lebon

Conseil d'État, 10ème - 9ème chambres réunies, 05/05/2025, 490202, Inédit au recueil Lebon, 2025-05-05

Délibération SAN-2020-015 du 7 décembre 2020

Délibération SAN-2020-015 du 7 décembre 2020, 2020-12-07

Code de la défense. — Article L4123-9-1

Code de la défense. — Article L4123-9-1, 2019-06-01

Loi n° 78-17 du 6 janvier 1978 — Article 70-16

Loi n° 78-17 du 6 janvier 1978 — Article 70-16, 2018-05-25

Code pénal — Article 226-17-1

Code pénal — Article 226-17-1, 2019-06-01

Loi n° 78-17 du 6 janvier 1978 — Article 58

Loi n° 78-17 du 6 janvier 1978 — Article 58, 2019-06-01

Délibération SAN-2020-014 du 7 décembre 2020

Délibération SAN-2020-014 du 7 décembre 2020, 2020-12-07

Loi n° 78-17 du 6 janvier 1978 — Article 102

Loi n° 78-17 du 6 janvier 1978 — Article 102, 2019-06-01

AEPD (Spain) - EXP202213638

AEPD (Spain) - EXP202213638, 2025-01-27

AEPD (Spain) - EXP202213323

AEPD (Spain) - EXP202213323, 2024-01-19

Garante per la protezione dei dati personali (Italy) - 9991183

Garante per la protezione dei dati personali (Italy) - 9991183, 2024-02-08

Datatilsynet (Denmark) - 2021-32-2067

Datatilsynet (Denmark) - 2021-32-2067, 2021-10-18

HDPA (Greece) - 36/2022

HDPA (Greece) - 36/2022, 2022-08-03

LAG Düsseldorf - 3 Sa 285/23

LAG Düsseldorf - 3 Sa 285/23, 2023-11-28

BVwG - W108 2285546-1/22E

BVwG - W108 2285546-1/22E, 2024-10-25

Datatilsynet (Denmark) - 2021-442-14071

Datatilsynet (Denmark) - 2021-442-14071, 2022-06-22

LG Köln - 28 O 138/22

LG Köln - 28 O 138/22, 2023-05-31

CNIL (France) - SAN-2020-015

CNIL (France) - SAN-2020-015, 2020-12-07

APD/GBA (Belgium) - 07/2021

HDPA (Greece) - 4/2023

HDPA (Greece) - 4/2023, 2023-02-02

ANSPDCP (Romania) - 03.11.2023

Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1)

Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1), 2021-09-10

HDPA (Greece) - 55/2021

DPC (Ireland) - IN-22-7-3

DPC (Ireland) - IN-22-7-3, 2026-04-30

DSB (Austria) - 2024-0.641.771

DSB (Austria) - 2024-0.641.771, 2024-10-16

AEPD (Spain) - PS/00028/2022

ANSPDCP (Romania) - 13.11.2023

AEPD (Spain) - EXP202104873

HDPA (Greece) - 9/2024

HDPA (Greece) - 9/2024, 2024-02-28

AZOP (Croatia) - AZOP (Croatia)

Tietosuojavaltuutetun toimisto (Finland) - 1150/161/2021

Tietosuojavaltuutetun toimisto (Finland) - 1150/161/2021, 2021-12-07

APD/GBA (Belgium) - 115/2023

APD/GBA (Belgium) - 115/2023, 2023-08-16

Datatilsynet (Norway) - 20/03046

Datatilsynet (Norway) - 20/03046, 2021-12-06

APDCAT (Catalonia) - PS 54/2021

DPC - Inquiry into University College Dublin (IN-19-7-4)

DPC - Inquiry into University College Dublin (IN-19-7-4), 2020-12-17

AEPD (Spain) - EXP202208091

APD/GBA (Belgium) - 154/2025

APD/GBA (Belgium) - 154/2025, 2025-09-29

APD/GBA (Belgium) - 22/2020

APD/GBA (Belgium) - 22/2020, 2020-05-08

ANSPDCP (Romania) - Automobilus International SRL

AEPD (Spain) - EXP202307113

AEPD (Spain) - EXP202307113, 2025-07-25

DPC (Ireland) - IN-19-9-3

DPC (Ireland) - IN-19-9-3, 2024-11-22

DPC (Ireland) - DPC Case Reference: IN-19-9-5

DPC (Ireland) - DPC Case Reference: IN-19-9-5, 2022-03-14

ICO (UK) - DPP Law Ltd

ICO (UK) - DPP Law Ltd, 2025-04-14

VDAI (Lithuania) - 3R-252

VDAI (Lithuania) - 3R-252, 2026-02-13

ANSPDCP (Romania) - Softehnica S.R.L

ICO (UK) - Birthlink

ICO (UK) - Birthlink, 2025-06-24

DSB (Austria) - 2023-0.603.142

DSB (Austria) - 2023-0.603.142, 2023-12-12

AEPD (Spain) - PS/00187/2020

AEPD (Spain) - PS/00187/2020, 2020-11-16

Persónuvernd (Iceland) - Case no. 2021122409

Persónuvernd (Iceland) - Case no. 2021122409, 2022-11-09

APD/GBA (Belgium) - 110/2023

APD/GBA (Belgium) - 110/2023, 2023-08-09

CNIL (France) - SAN-2025-008

CNIL (France) - SAN-2025-008, 2025-09-18

ANSPDCP (Romania) Beko Romania SA

ANSPDCP (Romania) Beko Romania SA, 2025-03-03

DSB (Austria) - DSB-D550.1221

DSB (Austria) - DSB-D550.1221, 2025-09-04

APD/GBA (Belgium) - 62/2022

APD/GBA (Belgium) - 62/2022, 2022-04-29

ANSPDCP (Romania) - 27.12.2022

ANSPDCP (Romania) - Webrasoft SRL

ANSPDCP (Romania) - Webrasoft SRL, 2025-03-04

BGH - VI ZR 10/24

BGH - VI ZR 10/24, 2024-11-18

HmbBfDI (Hamburg) - Bußgeld wegen Fehlentsorgung bei Logistik-Unternehmen

Datainspektionen - DI-2019-9432

Datainspektionen - DI-2019-9432, 2020-12-10

APD/GBA (Belgium) - 102/2026

APD/GBA (Belgium) - 102/2026, 2026-05-12

AEPD (Spain) - PS/00552/2023

Datatilsynet (Norway) - NO - DPA - 24/01055-10

Datatilsynet (Norway) - NO - DPA - 24/01055-10, 2025-03-26

ANSPDCP (Romania) - 19.01.2026

ANSPDCP (Romania) - Fine against Agricola International SA

Garante per la protezione dei dati personali (Italy) 10105764

Garante per la protezione dei dati personali (Italy) 10105764, 2024-12-24

ANSPDCP (Romania) - Comunicat Presa 09 12 2022

ANSPDCP (Romania) - Comunicat Presa 09 12 2022, 2022-11-30

APD/GBA (Belgium) - 18/2020

APD/GBA (Belgium) - 18/2020, 2020-04-28

Datatilsynet (Denmark) - 2020-442-8866

Rb. Midden-Nederland - UTR 19/1627

Rb. Midden-Nederland - UTR 19/1627, 2023-06-09

DPC - In the matter of Twitter International Company (IN-19-1-1)

DPC - In the matter of Twitter International Company (IN-19-1-1), 2020-12-09

Datatilsynet (Norway) - 20/02137

HDPA (Greece) - 16/2024

HDPA (Greece) - 16/2024, 2024-05-27

LG Augsburg - 022 O 2669/22

LG Augsburg - 022 O 2669/22, 2023-06-09

DPC - Health Service Executive - August 2020 (IN-19-9-1)

DPC - Health Service Executive - August 2020 (IN-19-9-1), 2020-08-18

Rb. Noord-Holland - 8117599 CV EXPL 19-16066

Rb. Noord-Holland - 8117599 CV EXPL 19-16066, 2020-10-28

ANSPDCP (Romania) - FINE AGAINST SSG SELECT SOLUTIONS

OLG Hamm - 7 U 19/23

OLG Hamm - 7 U 19/23, 2023-08-15

APD/GBA (Belgium) - 29/2023

APD/GBA (Belgium) - 29/2023, 2023-03-17

AP (The Netherlands) - 23.09.2021

AP (The Netherlands) - 23.09.2021, 2021-09-23

AEPD (Spain) - PS/00464/2020

LG Köln - 14 O 472/23

LG Köln - 14 O 472/23, 2025-01-07

ANSPDCP (Romania) - Vodafone Romania S.A.

OLG Braunschweig - Az.: 2 U 71/24

AP (The Netherlands) - 16.06.2020

AP (The Netherlands) - 16.06.2020, 2021-05-11

LG Duisburg - 10 O 126/22

LG Duisburg - 10 O 126/22, 2023-06-14

Datatilsynet (Denmark) - 2020-441-4364

Datatilsynet (Denmark) - 2020-441-4364, 2020-11-04

CNIL (France) - SAN-2023-008

AEPD (Spain) - PS/00268/2022

AEPD (Spain) - PS/00420/2021

ANSPDCP (Romania) - AUR Data Breach and Unlawful Processing

Datatilsynet (Denmark) - 2019-441-3399

Datatilsynet (Denmark) - 2019-441-3399, 2020-03-05

Datatilsynet (Denmark) - 2021-31-4596

ANSPDCP (Romania) - Actamedica SRL

Rb. Den Haag - SGR 20/1516

Rb. Den Haag - SGR 20/1516, 2021-03-31

CNIL (France) - SAN-2026-001

CNIL (France) - SAN-2026-001, 2026-01-08

AP (The Netherlands) - Boete datalek PVV Overijssel

HDPA (Greece) - 44/2025

HDPA (Greece) - 44/2025, 2025-12-31

ANSPDCP (Romania) - fine against AG-BROKER ASIGURARE S.R.L

EDPB - Binding Decision 1/2020 - 'Twitter'

EDPB - Binding Decision 1/2020 - 'Twitter', 2020-11-09

DPC (Ireland) - Meta "View-as" feature

ICO (UK) - HIV Scotland

ICO (UK) - HIV Scotland, 2021-10-18

HDPA (Greece) - 27/2025

HDPA (Greece) - 27/2025, 2025-06-25

ANSPDCP (Romania) - Valoris Center S.R.L.

DPC (Ireland) - City of Dublin Education and Training Board (CDETB)

ANSPDCP (Romania) - NTT Data Romania SA

CNIL (France) - SAN-2023-082

CNIL (France) - SAN-2023-082, 2023-07-20

AZOP (Croatia) - Decision 13-09-2024

APD/GBA (Belgium) - 64/2025

APD/GBA (Belgium) - 64/2025, 2025-04-01

CNIL (France) - CNIL2326891X

CNIL (France) - CNIL2326891X, 2023-07-20

AEPD (Spain) - PS/00179/2020

Rb. Midden-Nederland - C/16/481957/KG ZA 19-357

Rb. Midden-Nederland - C/16/481957/KG ZA 19-357, 2019-10-25

BAC (Bulgaria) - 2606/2021

CNPD (Portugal) - Deliberação 2019/494

CNPD (Portugal) - Deliberação 2019/494, 2019-09-03

ANSPDCP (Romania) - SC Travel Planner SRL

Datatilsynet (Norway) - 20/02042

Datatilsynet (Norway) - 20/02042, 2021-01-04

LG München I - 5 O 5853/22

ANSPDCP (Romania) - S.P.E.E.H. Hidroelectrica SA

HDPA (Greece) - 47/2022

VDAI (Lithuania) - VDAI vs UAB Prime Leasing

VDAI (Lithuania) - VDAI vs UAB Prime Leasing, 2021-11-29

APDCAT (Catalonia) - PS93/2024

ICO (UK) - Mermaids

ICO (UK) - Mermaids, 2021-07-05

ANSPDCP (Romania) - 18.06.2026

AEPD (Spain) - PS/00389/2019

Rb. Zeeland-West-Brabant - C/02/387229

Rb. Zeeland-West-Brabant - C/02/387229, 2022-09-21

BVwG - W211 2231475-1

BVwG - W211 2231475-1, 2021-10-20

LG Lübeck - 15 O 74/22

LG Lübeck - 15 O 74/22, 2023-05-25

HDPA (Greece) - 6/2026

HDPA (Greece) - 6/2026, 2026-04-21

ANSPDCP (Romania) - fine against Blue Projects SRL

Persónuvernd (Iceland) - 2021061419

Persónuvernd (Iceland) - 2021061419, 2021-09-27

CE - 490202

CE - 490202, 2025-05-05

Datatilsynet (Denmark) - 2019-41-0028

ANSPDCP (Romania) - 07.12.2023

AEPD (Spain) - PS/00080/2022

HDPA (Greece) - 33/2025

HDPA (Greece) - 33/2025, 2025-07-21

DPC (Ireland) - Inquiry concerning the University of Limerick (IN-19-7-1)

DPC (Ireland) - Inquiry concerning the University of Limerick (IN-19-7-1), 2025-12-10

VDAI (Lithuania) - 3R-1029

VDAI (Lithuania) - 3R-1029, 2025-08-05

APD/GBA (Belgium) - 53/2020

APD/GBA (Belgium) - 53/2020, 2020-09-01

BVwG - W274 2302843-1

BVwG - W274 2302843-1, 2026-04-30

OLG Dresden - 4 U 808/24

OLG Dresden - 4 U 808/24, 2024-12-10

ANSPDCP (Romania) - 07.11.2025

Datatilsynet (Denmark) - 2020-442-8862

Datatilsynet (Denmark) - 2020-442-8862, 2022-02-18

AEPD (Spain) - EXP202305979

AEPD (Spain) - EXP202305979, 2025-03-14

Commissioner (Cyprus) - 12.10.001.011.001

Commissioner (Cyprus) - 12.10.001.011.001, 2020-05-04

AEPD (Spain) - PS/00254/2019

ANSPDCP (Romania) - Unicredit Consumer Financing

VDAI (Lithuania) - Decision No. 3R-1700

APD/GBA (Belgium) - 170/2023

APD/GBA (Belgium) - 170/2023, 2023-12-20

OLG Wien - 13R3/24t

OLG Wien - 13R3/24t, 2025-03-21

AEPD (Spain) - EXP202200399

Commissioner (Cyprus) - 11.17.001.008.001

Commissioner (Cyprus) - 11.17.001.008.001, 2020-06-17

ANSPDCP (Romania) - 12.01.2023

ANSPDCP (Romania) - fine against Renault Commercial Roumanie SRL

HDPA (Greece) - Decision 18/2024

APD/GBA (Belgium) - 33/2022

APD/GBA (Belgium) - 33/2022, 2022-03-10

LG Deggendorf - 33 O 461/22

LG Deggendorf - 33 O 461/22, 2023-06-20

HDPA (Greece) - 37/2024

HDPA (Greece) - 37/2024, 2024-07-24

HDPA (Greece) - 18/2024

HDPA (Greece) - 18/2024, 2024-07-05

OLG Stuttgart - 9 U 34/21

OLG Stuttgart - 9 U 34/21, 2021-03-31

CNIL (France) - SAN-2020-008

CNIL (France) - SAN-2020-008, 2020-11-18