GDPR m.5 İlgili Kararlar

Maximilian Schrems v Meta Platforms Ireland Limited

Court of Justice of the European Union, Maximilian Schrems v Meta Platforms Ireland Limited, ECLI:EU:C:2024:834, 2024-10-04

Proceedings brought by B

Court of Justice of the European Union, Proceedings brought by B, ECLI:EU:C:2021:504, 2021-06-22

(Handlungsform des Trägers der gesetzlichen Rentenversicherung bei einer Prüfung nach § 212a SGB 6 gegenüber einer Festsetzungsstelle für die Beihilfe - Verwaltungsakt - Erforderlichkeit der Einsichtnahme in die Unterlagen aller beihilfeberechtigten Pflegebedürftigen)

(Handlungsform des Trägers der gesetzlichen Rentenversicherung bei einer Prüfung nach § 212a SGB 6 gegenüber einer Festsetzungsstelle für die Beihilfe - Verwaltungsakt - Erforderlichkeit der Einsichtnahme in die Unterlagen aller beihilfeberechtigten Pflegebedürftigen), 2021-04-27

Verarbeitung medizinischer Diagnosedaten aus Rechnungsdokumenten durch eine private Krankenversicherung zum Zweck individualisierter Angebote von Vorsorgeprogrammen; Geheimhaltungs- und Informationspflichten

Verarbeitung medizinischer Diagnosedaten aus Rechnungsdokumenten durch eine private Krankenversicherung zum Zweck individualisierter Angebote von Vorsorgeprogrammen; Geheimhaltungs- und Informationspflichten, 2026-03-06

Verpflichtung zur Löschung von einer Wirtschaftsauskunftei eingemeldeten Daten nach Forderungsausgleich; datenschutzrechtlicher Schadensersatzanspruch - Löschungsfrist bei Zahlungsstörungen

Verpflichtung zur Löschung von einer Wirtschaftsauskunftei eingemeldeten Daten nach Forderungsausgleich; datenschutzrechtlicher Schadensersatzanspruch - Löschungsfrist bei Zahlungsstörungen, 2025-12-18

Krankenversicherung - elektronische Gesundheitskarte und Telematikinfrastruktur - Vereinbarkeit mit Europa- und Verfassungsrecht - Gewährleistung einer angemessenen Datensicherheit - Beobachtungs- und Nachbesserungspflicht - Überwachung durch die Aufsichtsbehörden - gerichtliche Überprüfbarkeit

Krankenversicherung - elektronische Gesundheitskarte und Telematikinfrastruktur - Vereinbarkeit mit Europa- und Verfassungsrecht - Gewährleistung einer angemessenen Datensicherheit - Beobachtungs- und Nachbesserungspflicht - Überwachung durch die Aufsichtsbehörden - gerichtliche Überprüfbarkeit, 2021-01-20

Verarbeitung von Gesundheitsdaten im Arbeitsverhältnis

Verarbeitung von Gesundheitsdaten im Arbeitsverhältnis, 2021-08-26

EuGH-Vorlage zu Schadensersatzklage wegen Verletzung der Pflicht zur Auskunft über Verarbeitung von personenbezogenen Daten in Bußgeldverfahren

EuGH-Vorlage zu Schadensersatzklage wegen Verletzung der Pflicht zur Auskunft über Verarbeitung von personenbezogenen Daten in Bußgeldverfahren, 2025-05-06

Bundessozialgericht, B 1 KR 15/20 R

Bundessozialgericht, B 1 KR 15/20 R, 2021-01-20

Anspruch auf Unterlassung einer kommunalen Videoüberwachung

Anspruch auf Unterlassung einer kommunalen Videoüberwachung, 2024-05-02

Betriebsrat - Auskunftsanspruch - schwerbehinderte Menschen

Betriebsrat - Auskunftsanspruch - schwerbehinderte Menschen, 2023-05-09

(Zulässigkeit der Verarbeitung personenbezogener Daten im Besteuerungsverfahren gemäß § 29b AO)

(Zulässigkeit der Verarbeitung personenbezogener Daten im Besteuerungsverfahren gemäß § 29b AO), 2023-09-05

Erfordernis eines außergerichtlich gestellten Antrags auf Auskunftserteilung nach Art. 15 DSGVO

Erfordernis eines außergerichtlich gestellten Antrags auf Auskunftserteilung nach Art. 15 DSGVO, 2024-11-12

Zulässigkeit der Übermittlung der Positivdaten durch einen Mobilfunkdiensteanbieter an die SCHUFA zum Zwecke der Betrugsprävention

Zulässigkeit der Übermittlung der Positivdaten durch einen Mobilfunkdiensteanbieter an die SCHUFA zum Zwecke der Betrugsprävention, 2025-10-14

Verarbeitung der Postanschrift eines Antragstellers nach dem Informationsfreiheitsgesetz

Verarbeitung der Postanschrift eines Antragstellers nach dem Informationsfreiheitsgesetz, 2024-03-20

Auskunftsanspruch nach der Datenschutz-Grundverordnung

Auskunftsanspruch nach der Datenschutz-Grundverordnung, 2021-11-17

Immaterieller Schaden durch Verkauf rechtswidrig abgegriffener Daten im Darknet

Immaterieller Schaden durch Verkauf rechtswidrig abgegriffener Daten im Darknet, 2025-11-11

Datenschutz - immaterieller Schadenersatz

Datenschutz - immaterieller Schadenersatz, 2025-05-08

Widerruf der Meldung offener Forderungen an die SCHUFA sowie Ersatz des immateriellen Schadens

Widerruf der Meldung offener Forderungen an die SCHUFA sowie Ersatz des immateriellen Schadens, 2026-05-12

Nutzung eines sozialen Netzwerks: Inhaltskontrolle der formularmäßigen Verpflichtung des Nutzers zur Verwendung seines im täglichen Leben gebrauchten Namens – Klarnamenpflicht, Facebook

Nutzung eines sozialen Netzwerks: Inhaltskontrolle der formularmäßigen Verpflichtung des Nutzers zur Verwendung seines im täglichen Leben gebrauchten Namens – Klarnamenpflicht, Facebook, 2022-01-27

Datenschutz - Gesundheitsdaten - Verarbeitung durch Arbeitgeber - Medizinischer Dienst

Datenschutz - Gesundheitsdaten - Verarbeitung durch Arbeitgeber - Medizinischer Dienst, 2024-06-20

Datenschutzrechtliche Zulässigkeit der Einsicht in Akten der Zwangsversteigerung ohne Schwärzung

Datenschutzrechtliche Zulässigkeit der Einsicht in Akten der Zwangsversteigerung ohne Schwärzung, 2026-05-21

Anspruch auf Berichtigung des Geburtsdatums im Melderegister (verneint)

Anspruch auf Berichtigung des Geburtsdatums im Melderegister (verneint), 2022-03-02

Immaterieller Schadensersatz wegen Verletzung der Datenschutz-Grundverordnung: Kurzzeitiger Verlust der Kontrolle über eigene personenbezogene Daten bei Facebook

Immaterieller Schadensersatz wegen Verletzung der Datenschutz-Grundverordnung: Kurzzeitiger Verlust der Kontrolle über eigene personenbezogene Daten bei Facebook, 2024-11-18

Datenschutz - Schadenersatz - Überwachung durch Detektei

Datenschutz - Schadenersatz - Überwachung durch Detektei, 2024-07-25

Verarbeitung öffentlich zugänglicher Kontaktdaten von Zahnarztpraxen zum Zweck der Telefonwerbung ohne Einwilligung; Antrag auf Wiederaufgreifen des Verfahrens wegen Änderung der Rechtslage

Verarbeitung öffentlich zugänglicher Kontaktdaten von Zahnarztpraxen zum Zweck der Telefonwerbung ohne Einwilligung; Antrag auf Wiederaufgreifen des Verfahrens wegen Änderung der Rechtslage, 2025-01-29

Anspruch auf Auskunft über Bestandsdaten eines sozialen Netzwerks bei beleidigenden Äußerungen

Anspruch auf Auskunft über Bestandsdaten eines sozialen Netzwerks bei beleidigenden Äußerungen, 2019-09-24

FERRIERI AND BONASSISA v ITALY - 40607/19

FERRIERI AND BONASSISA v ITALY - 40607/19 ECtHR (8 January 2026), 2026-01-08

CASE OF FERRIERI AND BONASSISA v. ITALY

CASE OF FERRIERI AND BONASSISA v ITALY [Chamber] ECtHR App No 40607/19, 34583/20 (8 January 2026), 2026-01-08

Binding decision 1/2021 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding WhatsApp Ireland under Article 65(1)(a) GDPR

Binding Decision 3/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Facebook service (Art. 65 GDPR)

Urgent Binding Decision 01/2021 on the request under Article 66(2) GDPR from the Hamburg (German) Supervisory Authority for ordering the adoption of final measures regarding Facebook Ireland Limited

Binding Decision 4/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Instagram service (Art. 65 GDPR)

Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR

Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR)

Binding Decision 5/2022 on the dispute submitted by the Irish SA regarding WhatsApp Ireland Limited (Art. 65 GDPR)

Binding Decision 2/2022 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Meta Platforms Ireland Limited (Instagram) under Article 65(1)(a) GDPR

EDPBI:IS:OSS:D:2021:216 — IS SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:IS:OSS:D:2021:216 — IS SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2021-04-29

EDPBI:IE:OSS:D:2024:1115 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2024:1115 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-01-31

EDPBI:DE:OSS:D:2021:188 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2021:188 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-03-02

EDPBI:FR:OSS:D:2021:279 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:FR:OSS:D:2021:279 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-06-16

EDPBI:IE:OSS:D:2024:1142 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2024:1142 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-03-01

EDPBI:EE:OSS:D:2023:961 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2023:961 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-10-04

EDPBI:SE:OSS:D:2025:1611 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:1611 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-01-20

EDPBI:SE:OSS:D:2025:3476 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:3476 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-05-20

EDPBI:FR:OSS:D:2025:1612 — FR SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2025:1612 — FR SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2025-01-09

EDPBI:IE:OSS:D:2023:1013 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:1013 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-11-15

EDPBI:LU:OSS:D:2025:3423 — LU SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 32 (Security of processing))

EDPBI:LU:OSS:D:2025:3423 — LU SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 32 (Security of processing)), 2025-04-23

EDPBI:EE:OSS:D:2020:95 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2020:95 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2020-03-16

EDPBI:DE:OSS:D:2024:1594 — DE SA final decision (Article 4 (Definitions), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:DE:OSS:D:2024:1594 — DE SA final decision (Article 4 (Definitions), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2024-12-13

EDPBI:FR:OSS:D:2023:762 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 26 (Joint controllers))

EDPBI:FR:OSS:D:2023:762 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 26 (Joint controllers)), 2023-05-11

EDPBI:FI:OSS:D:2022:627 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:FI:OSS:D:2022:627 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2022-12-27

EDPBI:IE:OSS:D:2023:644 — IE SA final decision (Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2023:644 — IE SA final decision (Article 7 (Conditions for consent)), 2023-01-09

EDPBI:NO:OSS:D:2021:292 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2021:292 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-11-11

EDPBI:MT:OSS:D:2022:466 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:MT:OSS:D:2022:466 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-09-07

EDPBI:ES:OSS:D:2025:3595 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:ES:OSS:D:2025:3595 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-09-23

EDPBI:FR:OSS:D:2023:809 — FR SA final decision (Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2023:809 — FR SA final decision (Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2023-06-15

EDPBI:GB:OSS:D:2019:31 — GB SA final decision (Article 16 (Right to rectification), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:GB:OSS:D:2019:31 — GB SA final decision (Article 16 (Right to rectification), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2019-08-03

EDPBI:FR:OSS:D:2020:193 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2020:193 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2020-11-12

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject))

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject)), 2022-04-26

EDPBI:LU:OSS:D:2023:1036 — LU SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:LU:OSS:D:2023:1036 — LU SA final decision (Article 5 (Principles relating to processing of personal data)), 2023-08-25

EDPBI:IE:OSS:D:2024:1367 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2024:1367 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-07-08

EDPBI:LU:OSS:D:2021:253 — LU SA final decision (Article 15 (Right of access by the data subject))

EDPBI:LU:OSS:D:2021:253 — LU SA final decision (Article 15 (Right of access by the data subject)), 2021-10-29

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority))

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority)), 2025-09-04

EDPBI:LU:OSS:D:2024:1113 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2024:1113 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2024-01-19

EDPBI:LU:OSS:D:2024:1387 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:LU:OSS:D:2024:1387 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-07-26

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-12-19

EDPBI:IE:OSS:D:2023:892 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:IE:OSS:D:2023:892 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2023-09-04

EDPBI:SE:OSS:D:2025:3654 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3654 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-17

EDPBI:DE:OSS:D:2023:928 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:DE:OSS:D:2023:928 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2023-09-11

EDPBI:FR:OSS:D:2020:134 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2020:134 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2020-07-28

EDPBI:LT:OSS:D:2025:3855 — LT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:LT:OSS:D:2025:3855 — LT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2025-12-31

EDPBI:FR:OSS:D:2022:369 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:FR:OSS:D:2022:369 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-05-20

EDPBI:LT:OSS:D:2025:3856 — LT SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:LT:OSS:D:2025:3856 — LT SA final decision (Article 5 (Principles relating to processing of personal data)), 2025-12-31

EDPBI:DE:OSS:D:2024:1124 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2024:1124 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-02-14

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-12-19

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-05-10

EDPBI:DK:OSS:D:2021:238 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DK:OSS:D:2021:238 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-06-21

EDPBI:SE:OSS:D:2025:3706 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3706 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject)), 2025-11-10

EDPBI:SE:OSS:D:2022:506 — SE SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:SE:OSS:D:2022:506 — SE SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-10-10

EDPBI:LU:OSS:D:2019:12 — LU SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2019:12 — LU SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2019-05-10

EDPBI:DE:OSS:D:2022:527 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:DE:OSS:D:2022:527 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-10-21

EDPBI:BE:OSS:D:2020:200 — BE SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2020:200 — BE SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2020-05-14

EDPBI:SE:OSS:D:2025:3756 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3756 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-28

EDPBI:HU:OSS:D:2020:118 — HU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:HU:OSS:D:2020:118 — HU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2020-06-29

EDPBI:SE:OSS:D:2025:3690 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3690 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-30

EDPBI:LU:OSS:D:2025:3510 — LU SA final decision (Article 6 (Lawfulness of processing), Article 21 (Right to object), Article 32 (Security of processing))

EDPBI:LU:OSS:D:2025:3510 — LU SA final decision (Article 6 (Lawfulness of processing), Article 21 (Right to object), Article 32 (Security of processing)), 2025-06-26

EDPBI:DE:OSS:D:2024:1282 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2024:1282 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-04-24

EDPBI:FR:OSS:D:2023:1100 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2023:1100 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2023-12-29

EDPBI:LU:OSS:D:2023:1004 — LU SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:LU:OSS:D:2023:1004 — LU SA final decision (Article 5 (Principles relating to processing of personal data)), 2023-11-10

EDPBI:FR:OSS:D:2024:1275 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2024:1275 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-04-25

EDPBI:LU:OSS:D:2023:705 — LU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:LU:OSS:D:2023:705 — LU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2023-03-27

EDPBI:DE:OSS:D:2020:111 — DE SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2020:111 — DE SA final decision (Article 5 (Principles relating to processing of personal data)), 2020-06-04

EDPBI:CY:OSS:D:2024:1264 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2024:1264 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-04-12

EDPBI:SE:OSS:D:2024:1446 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1446 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-09-20

EDPBI:SE:OSS:D:2022:331 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 11 (Processing which does not require identification))

EDPBI:SE:OSS:D:2022:331 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 11 (Processing which does not require identification)), 2022-02-16

EDPBI:FR:OSS:D:2025:3395 — FR SA final decision (Article 25 (Data protection by design and by default))

EDPBI:FR:OSS:D:2025:3395 — FR SA final decision (Article 25 (Data protection by design and by default)), 2025-04-03

EDPBI:SE:OSS:D:2024:1462 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2024:1462 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-10-15

EDPBI:LT:OSS:D:2024:1361 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:LT:OSS:D:2024:1361 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-07-02

EDPBI:IE:OSS:D:2022:464 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2022:464 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-09-02

EDPBI:ES:OSS:D:2021:263 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:ES:OSS:D:2021:263 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-07-01

EDPBI:EE:OSS:D:2021:289 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2021:289 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2021-11-04

EDPBI:FR:OSS:D:2022:430 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2022:430 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-07-07

EDPBI:DK:OSS:D:2020:110 — DK SA final decision (Article 32 (Security of processing))

EDPBI:DK:OSS:D:2020:110 — DK SA final decision (Article 32 (Security of processing)), 2020-06-03

EDPBI:PL:OSS:D:2020:194 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:PL:OSS:D:2020:194 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2020-03-23

EDPBI:SE:OSS:D:2025:3763 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3763 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-12-02

EDPBI:IE:OSS:D:2023:953 — IE SA final decision (Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2023:953 — IE SA final decision (Article 7 (Conditions for consent)), 2023-09-28

EDPBI:LI:OSS:D:2019:40 — LI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:LI:OSS:D:2019:40 — LI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2019-08-12

EDPBI:NO:OSS:D:2022:314 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject))

EDPBI:NO:OSS:D:2022:314 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject)), 2022-01-14

EDPBI:SE:OSS:D:2024:1312 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2024:1312 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-06-10

EDPBI:NL:OSS:D:2023:1062 — NL SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:NL:OSS:D:2023:1062 — NL SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2023-12-13

EDPBI:SE:OSS:D:2024:1461 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2024:1461 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2024-10-21

EDPBI:LT:OSS:D:2025:3547 — LT SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LT:OSS:D:2025:3547 — LT SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-08-05

EDPBI:MT:OSS:D:2022:391 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:MT:OSS:D:2022:391 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-06-28

EDPBI:AT:OSS:D:2025:1666 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:AT:OSS:D:2025:1666 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2025-03-07

EDPBI:NO:OSS:D:2021:215 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:NO:OSS:D:2021:215 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2021-05-03

EDPBI:FR:OSS:D:2024:1547 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 35 (Data protection impact assessment))

EDPBI:FR:OSS:D:2024:1547 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 35 (Data protection impact assessment)), 2024-12-05

EDPBI:HU:OSS:D:2020:167 — HU SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:HU:OSS:D:2020:167 — HU SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2020-12-16

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-02-02

EDPBI:FR:OSS:D:2022:492 — FR SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2022:492 — FR SA final decision (Article 5 (Principles relating to processing of personal data)), 2022-09-26

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing))

EDPBI:GB:OSS:D:2020:100 — GB SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 32 (Security of processing)), 2020-04-15

EDPBI:ES:OSS:D:2021:338 — ES SA final decision (Article 6 (Lawfulness of processing))

EDPBI:ES:OSS:D:2021:338 — ES SA final decision (Article 6 (Lawfulness of processing)), 2021-07-19

EDPBI:SE:OSS:D:2024:1562 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:SE:OSS:D:2024:1562 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-12-19

EDPBI:FR:OSS:D:2024:1528 — FR SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1528 — FR SA final decision (Article 5 (Principles relating to processing of personal data)), 2024-11-15

EDPBI:LU:OSS:D:2025:3629 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2025:3629 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-09-26

EDPBI:SE:OSS:D:2024:1098 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2024:1098 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2024-01-10

EDPBI:CY:OSS:D:2021:175 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:CY:OSS:D:2021:175 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2021-01-12

EDPBI:SE:OSS:D:2025:1825 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:1825 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-06-30

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing)), 2021-11-10

EDPBI:EE:OSS:D:2025:1707 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2025:1707 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2025-04-10

EDPBI:SE:OSS:D:2025:3712 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3712 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-11-12

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-04-26

EDPBI:FR:OSS:D:2024:1455 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data))

EDPBI:FR:OSS:D:2024:1455 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data)), 2024-09-26

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller))

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller)), 2024-07-17

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2021-02-02

EDPBI:EE:OSS:D:2022:343 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2022:343 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-03-09

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-08-30

EDPBI:SE:OSS:D:2024:1424 — SE SA final decision (Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1424 — SE SA final decision (Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-09-03

EDPBI:FI:OSS:D:2023:669 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 32 (Security of processing))

EDPBI:FI:OSS:D:2023:669 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 32 (Security of processing)), 2023-02-16

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:GB:OSS:D:2020:147 — GB SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2020-10-16

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-09

EDPBI:FR:OSS:D:2024:1542 — FR SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1542 — FR SA final decision (Article 5 (Principles relating to processing of personal data)), 2024-12-04

EDPBI:SE:OSS:D:2025:3754 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:3754 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2025-11-27

EDPBI:NL:OSS:D:2023:756 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:NL:OSS:D:2023:756 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-05-17

EDPBI:GB:OSS:D:2019:32 — GB SA final decision (Article 11 (Processing which does not require identification), Article 16 (Right to rectification), Article 21 (Right to object))

EDPBI:GB:OSS:D:2019:32 — GB SA final decision (Article 11 (Processing which does not require identification), Article 16 (Right to rectification), Article 21 (Right to object)), 2019-08-03

EDPBI:DE:OSS:D:2021:203 — NO SA final decision (Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2021:203 — NO SA final decision (Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-04-09

EDPBI:LU:OSS:D:2019:13 — LU SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:LU:OSS:D:2019:13 — LU SA final decision (Article 15 (Right of access by the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2019-05-10

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2025-08-05

EDPBI:FR:OSS:D:2021:306 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2021:306 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2021-09-16

EDPBI:LI:OSS:D:2019:29 — LI SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:LI:OSS:D:2019:29 — LI SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2019-08-21

EDPBI:DE:OSS:D:2024:1135 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2024:1135 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-01-19

EDPBI:MT:OSS:D:2022:375 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:MT:OSS:D:2022:375 — MT SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-06-08

EDPBI:EE:OSS:D:2025:1784 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:EE:OSS:D:2025:1784 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2025-05-23

EDPBI:DE:OSS:D:2025:3594 — ES SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2025:3594 — ES SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2025-09-22

EDPBI:SE:OSS:D:2025:1757 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2025:1757 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-07

EDPBI:DE:OSS:D:2024:1280 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:DE:OSS:D:2024:1280 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2024-04-24

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-07

EDPBI:EE:OSS:D:2024:1093 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority))

EDPBI:EE:OSS:D:2024:1093 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority)), 2024-01-03

EDPBI:DE:OSS:D:2019:53 — AT SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2019:53 — AT SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data)), 2019-10-02

EDPBI:EE:OSS:D:2022:469 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 21 (Right to object))

EDPBI:EE:OSS:D:2022:469 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 21 (Right to object)), 2022-09-09

EDPBI:CZ:OSS:D:2019:28 — CZ SA final decision (Article 24 (Responsibility of the controller), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:CZ:OSS:D:2019:28 — CZ SA final decision (Article 24 (Responsibility of the controller), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2019-07-11

EDPBI:FR:OSS:D:2022:580 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 28 (Processor), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2022:580 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 28 (Processor), Article 32 (Security of processing)), 2022-11-24

EDPBI:AT:OSS:D:2022:424 — AT SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:AT:OSS:D:2022:424 — AT SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-06-23

EDPBI:LU:OSS:D:2025:1394 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2025:1394 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-08-05

EDPBI:SE:OSS:D:2025:3694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-04

EDPBI:EE:OSS:D:2025:1791 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2025:1791 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-30

EDPBI:DK:OSS:D:2023:688 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:DK:OSS:D:2023:688 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-03-02

EDPBI:PL:OSS:D:2023:681 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:PL:OSS:D:2023:681 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2023-03-09

EDPBI:SE:OSS:D:2025:3553 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:SE:OSS:D:2025:3553 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2025-08-07

EDPBI:CY:OSS:D:2024:1120 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:CY:OSS:D:2024:1120 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-02-08

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2023-01-30

EDPBI:FR:OSS:D:2021:310 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:FR:OSS:D:2021:310 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-12-30

EDPBI:FR:OSS:D:2023:795 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2023:795 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data)), 2023-06-15

EDPBI:SE:OSS:D:2025:3762 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3762 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-12-12

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2025-04-25

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-08-25

EDPBI:FR:OSS:D:2022:351 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:FR:OSS:D:2022:351 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-03-18

EDPBI:FR:OSS:D:2025:1613 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2025:1613 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 32 (Security of processing)), 2025-01-06

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2024-02-14

EDPBI:ES:OSS:D:2022:334 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:ES:OSS:D:2022:334 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-02-23

EDPBI:ES:OSS:D:2020:146 — ES SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:ES:OSS:D:2020:146 — ES SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2020-10-15

EDPBI:EE:OSS:D:2023:885 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2023:885 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-01-27

EDPBI:SE:OSS:D:2022:366 — SE SA final decision (Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:366 — SE SA final decision (Article 15 (Right of access by the data subject)), 2022-05-11

EDPBI:LV:OSS:D:2019:79 — LV SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:LV:OSS:D:2019:79 — LV SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2019-11-08

EDPBI:DK:OSS:D:2019:69 — DK SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 5 (Principles relating to processing of personal data))

EDPBI:DK:OSS:D:2019:69 — DK SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 5 (Principles relating to processing of personal data)), 2019-06-25

EDPBI:SE:OSS:D:2025:1753 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:1753 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2025-05-05

EDPBI:IE:OSS:D:2023:989 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:IE:OSS:D:2023:989 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2023-11-03

EDPBI:CY:OSS:D:2023:962 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:CY:OSS:D:2023:962 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 34 (Communication of a personal data breach to the data subject)), 2023-10-04

EDPBI:DE:OSS:D:2024:598 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:DE:OSS:D:2024:598 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-15

EDPBI:EE:OSS:D:2020:160 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:EE:OSS:D:2020:160 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2020-11-09

EDPBI:SE:OSS:D:2025:3448 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:3448 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-05-05

EDPBI:LI:OSS:D:2019:42 — LI SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:LI:OSS:D:2019:42 — LI SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data)), 2019-08-27

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-07-20

EDPBI:SE:OSS:D:2023:1045 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2023:1045 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-12-04

EDPBI:FR:OSS:D:2022:475 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2022:475 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2022-09-08

EDPBI:FR:OSS:D:2024:1553 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1553 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2024-12-04

EDPBI:IE:OSS:D:2024:1364 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:IE:OSS:D:2024:1364 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2024-07-05

EDPBI:LU:OSS:D:2022:657 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:LU:OSS:D:2022:657 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2022-01-02

EDPBI:LU:OSS:D:2022:656 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:LU:OSS:D:2022:656 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2022-02-12

EDPBI:NL:OSS:D:2024:1417 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 21 (Right to object))

EDPBI:NL:OSS:D:2024:1417 — NL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 21 (Right to object)), 2024-08-14

EDPBI:DK:OSS:D:2023:993 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DK:OSS:D:2023:993 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2023-11-03

EDPBI:FR:OSS:D:2024:1286 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:FR:OSS:D:2024:1286 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-05-22

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor))

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor)), 2023-09-13

EDPBI:FR:OSS:D:2019:8 — FR SA final decision (Article 21 (Right to object), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:FR:OSS:D:2019:8 — FR SA final decision (Article 21 (Right to object), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2019-03-22

EDPBI:SE:OSS:D:2025:3682 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3682 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-10-29

EDPBI:NO:OSS:D:2024:1405 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:NO:OSS:D:2024:1405 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-08-19

EDPBI:FR:OSS:D:2021:202 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)), Article 28 (Processor))

EDPBI:FR:OSS:D:2021:202 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)), Article 28 (Processor)), 2021-04-01

EDPBI:FR:OSS:D:2024:1456 — FR SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1456 — FR SA final decision (Article 5 (Principles relating to processing of personal data)), 2024-09-26

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-09-04

EDPBI:FR:OSS:D:2022:603 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2022:603 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2022-09-08

EDPBI:FR:OSS:D:2023:697 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:FR:OSS:D:2023:697 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-03-16

EDPBI:SE:OSS:D:2025:3752 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3752 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-26

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:ES:OSS:D:2024:1422 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2024-09-03

EDPBI:LU:OSS:D:2025:3639 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2025:3639 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-09-26

EDPBI:HU:OSS:D:2023:988 — HU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 26 (Joint controllers))

EDPBI:HU:OSS:D:2023:988 — HU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 26 (Joint controllers)), 2023-11-02

EDPBI:SE:OSS:D:2021:300 — SE SA final decision (Article 32 (Security of processing))

EDPBI:SE:OSS:D:2021:300 — SE SA final decision (Article 32 (Security of processing)), 2021-11-22

EDPBI:IE:OSS:D:2024:1444 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039)

EDPBI:IE:OSS:D:2024:1444 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039), 2024-09-19

EDPBI:EE:OSS:D:2024:1404 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2024:1404 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-08-19

EDPBI:EE:OSS:D:2022:447 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2022:447 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2022-08-25

EDPBI:FR:OSS:D:2024:1407 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FR:OSS:D:2024:1407 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-07-24

EDPBI:SE:OSS:D:2022:404 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:404 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2022-07-18

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-04-10

EDPBI:EE:OSS:D:2022:333 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:EE:OSS:D:2022:333 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-02-18

EDPBI:LU:OSS:D:2025:3422 — LU SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:LU:OSS:D:2025:3422 — LU SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-04-23

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-03-16

EDPBI:DE:OSS:D:2024:1283 — DE SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2024:1283 — DE SA final decision (Article 5 (Principles relating to processing of personal data)), 2024-05-16

EDPBI:IE:OSS:D:2023:738 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2023:738 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2023-05-05

EDPBI:FI:OSS:D:2022:604 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FI:OSS:D:2022:604 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-12-09

EDPBI:IE:OSS:D:2022:593 — IE SA final decision (Article 15 (Right of access by the data subject))

EDPBI:IE:OSS:D:2022:593 — IE SA final decision (Article 15 (Right of access by the data subject)), 2022-12-13

EDPBI:PL:OSS:D:2022:414 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:PL:OSS:D:2022:414 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-07-29

EDPBI:LU:OSS:D:2024:1392 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:LU:OSS:D:2024:1392 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-07-26

EDPBI:FR:OSS:D:2024:1136 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 28 (Processor))

EDPBI:FR:OSS:D:2024:1136 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 13 (Information to be provided where personal data are collected from the data subject), Article 28 (Processor)), 2024-01-31

EDPBI:LU:OSS:D:2025:1605 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:LU:OSS:D:2025:1605 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-01-17

EDPBI:SE:OSS:D:2024:1563 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1563 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-12-19

EDPBI:LU:OSS:D:2023:1006 — LU SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:LU:OSS:D:2023:1006 — LU SA final decision (Article 5 (Principles relating to processing of personal data)), 2023-11-10

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:NO:OSS:D:2024:1408 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-08-20

EDPBI:DE:OSS:D:2022:535 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:DE:OSS:D:2022:535 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-11-04

EDPBI:IT:OSS:D:2024:1538 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039)

EDPBI:IT:OSS:D:2024:1538 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039), 2024-11-14

EDPBI:LU:OSS:D:2023:1033 — LU SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:LU:OSS:D:2023:1033 — LU SA final decision (Article 5 (Principles relating to processing of personal data)), 2023-08-09

EDPBI:LU:OSS:D:2023:1035 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LU:OSS:D:2023:1035 — LU SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-08-17

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:ES:OSS:D:2024:1400 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-08-14

EDPBI:NO:OSS:D:2024:1244 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2024:1244 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-03-27

EDPBI:SE:OSS:D:2025:3710 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3710 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-11-12

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2024-12-11

EDPBI:IE:OSS:D:2021:356 — IE SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:IE:OSS:D:2021:356 — IE SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 5 (Principles relating to processing of personal data)), 2021-08-20

EDPBI:FR:OSS:D:2022:529 — FR SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2022:529 — FR SA final decision (Article 32 (Security of processing), Article 5 (Principles relating to processing of personal data)), 2022-10-14

EDPBI:EE:OSS:D:2021:217 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2021:217 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2021-05-07

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:FR:OSS:D:2023:802 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2023-06-08

EDPBI:FR:OSS:D:2024:1303 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing))

EDPBI:FR:OSS:D:2024:1303 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing)), 2024-05-23

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DK:OSS:D:2020:115 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-06-18

EDPBI:DE:OSS:D:2024:1279 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:DE:OSS:D:2024:1279 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2024-04-24

EDPBI:IE:OSS:D:2024:1311 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2024:1311 — IE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-06-07

EDPBI:DE:OSS:D:2023:863 — AT SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:DE:OSS:D:2023:863 — AT SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2023-08-09

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:LT:OSS:D:2019:17 — LT SA final decision (Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2019-05-16

EDPBI:LT:OSS:D:2026:3885 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LT:OSS:D:2026:3885 — LT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2026-01-30

EDPBI:SE:OSS:D:2021:270 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2021:270 — SE SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2021-08-31

EDPBI:SE:OSS:D:2024:1362 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:SE:OSS:D:2024:1362 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-06-20

EDPBI:FR:OSS:D:2024:1583 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1583 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data)), 2024-12-05

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-02-06

EDPBI:SE:OSS:D:2025:3687 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3687 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-29

EDPBI:SE:OSS:D:2025:3751 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3751 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-26

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority))

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority)), 2024-12-18

EDPBI:EE:OSS:D:2024:1229 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2024:1229 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-02-20

EDPBI:DK:OSS:D:2025:1654 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:DK:OSS:D:2025:1654 — DK SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2025-01-18

EDPBI:DE:OSS:D:2021:229 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:DE:OSS:D:2021:229 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2021-06-07

EDPBI:SE:OSS:D:2023:710 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2023:710 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-03-31

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing)), 2025-04-28

EDPBI:SE:OSS:D:2022:381 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2022:381 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2022-06-14

EDPBI:DE:OSS:D:2023:1125 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2023:1125 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-02-14

Bonnier Audio & Ors (Intellectual property) French Text [2011] EUECJ C-461/10

Case C-461/10 Bonnier Audio & Ors (Intellectual property), 2011-11-17

X v Russmedia Digital SRL and Inform Media Press SRL

Court of Justice of the European Union, X v Russmedia Digital SRL and Inform Media Press SRL, ECLI:EU:C:2025:935, 2025-12-02

Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect

Court of Justice of the European Union, Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect, ECLI:EU:C:2025:2, 2025-01-09

Österreichische Datenschutzbehörde v WK

Court of Justice of the European Union, Österreichische Datenschutzbehörde v WK, ECLI:EU:C:2024:46, 2024-01-16

RW v Österreichische Post AG

Court of Justice of the European Union, RW v Österreichische Post AG, ECLI:EU:C:2023:3, 2023-01-12

ECLI:EU:C:2026:496

Case C-484/24 EU:C:2026:496, 2026-06-18

Transfer of Passenger Name Record data from the European Union to Canada (Opinions of the Court) [2017] EUECJ Avis-1/15_OC

Transfer of Passenger Name Record data from the European Union to Canada (Opinions of the Court) EU:C:2017:592, 2017-07-26

Proximus NV v Gegevensbeschermingsautoriteit

Court of Justice of the European Union, Proximus NV v Gegevensbeschermingsautoriteit, ECLI:EU:C:2022:833, 2022-10-27

OT v Vyriausioji tarnybinės etikos komisija

Court of Justice of the European Union, OT v Vyriausioji tarnybinės etikos komisija, ECLI:EU:C:2022:601, 2022-08-01

TK v Asociaţia de Proprietari bloc M5A-ScaraA

TK v Asociaţia de Proprietari bloc M5A-ScaraA EU:C:2019:1064

Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság

Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság EU:C:2022:805, 2022-10-20

OQ v Land Hessen

Court of Justice of the European Union, OQ v Land Hessen, ECLI:EU:C:2023:957, 2023-12-07

HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others

HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others EU:C:2024:738, 2024-09-12

Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors - Opinion) FR [2024] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Judicial inspectorate competent to propose the initiation of disciplinary proceedings against judges and prosecutors) FR, 2024-10-04

Amt der Tiroler Landesregierung v Datenschutzbehörde

Amt der Tiroler Landesregierung v Datenschutzbehörde EU:C:2025:127, 2025-02-27

Storstockholms Lokaltrafik (Protection of personal data - Personal data collected by means of body cameras worn by ticket inspectors on public transport - Judgment) [2025] EUECJ C-422/24

Case C-422/24 Storstockholms Lokaltrafik (Protection of personal data - Personal data collected by means of body cameras worn by ticket inspectors on public transport) EU:C:2025:980, 2025-12-18

Rechnungshof v Österreichischer Rundfunk and Others and Christa Neukomm and Joseph Lauermann v Österreichischer Rundfunk

Rechnungshof v Österreichischer Rundfunk and Others and Christa Neukomm and Joseph Lauermann v Österreichischer Rundfunk EU:C:2003:294

Schrems (Communication de données au grand public) (rotection of natural persons with regard to the processing of personal data - Online social networks - General terms of use relating to contracts concluded between a digital platform and a user - Personalised advertising - Judgment) en [2024] EUECJ C-446/21

Case C-446/21 Schrems (Communication de données au grand public) (rotection of natural persons with regard to the processing of personal data - Online social networks - General terms of use relating to contracts concluded between a digital platform and a user - Personalised advertising) en, 2024-10-04

Nowak (Approximation of laws Approximation of laws Data protection) [2017] EUECJ C-434/16

Case C-434/16 Nowak (Approximation of laws Approximation of laws Data protection), 2017-12-20

WhatsApp Ireland v EDPB (Protection of natural persons with regard to the processing of personal data - Dispute resolution by the European Data Protection Board - Judgment) [2026] EUECJ C-97/23P

Case C-97/23 WhatsApp Ireland v EDPB (Protection of natural persons with regard to the processing of personal data - Dispute resolution by the European Data Protection Board) EU:C:2026:81

VX and AT v Gemeinde Ummendorf

VX and AT v Gemeinde Ummendorf EU:C:2023:988, 2023-12-14

Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság

Court of Justice of the European Union, Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság, ECLI:EU:C:2024:239, 2024-03-14

Agentsia po vpisvaniyata (Protection of natural persons with regard to the processing of personal data - Judgment) en [2024] EUECJ C-200/23

Case C-200/23 Agentsia po vpisvaniyata (Protection of natural persons with regard to the processing of personal data) en, 2024-10-04

Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V

Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V EU:C:2024:598, 2024-07-11

Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources, Minister for Justice, Equality and Law Reform, Commissioner of the Garda Síochána, Ireland, The Attorney General, intervener: Irish Human Rights Commission, and Kärntner Landesregierung, Michael Seitlinger, Christof Tschohl and others

Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources, Minister for Justice, Equality and Law Reform, Commissioner of the Garda Síochána, Ireland, The Attorney General, intervener: Irish Human Rights Commission, and Kärntner Landesregierung, Michael Seitlinger, Christof Tschohl and others EU:C:2014:238

K GmbH (Traitement de donnees personnelles des employes) (Protection of natural persons with regard to the processing of personal data - Processing of data in the context of employment relationships - Judgment) French Text [2024] EUECJ C-65/23

Case C-65/23 K GmbH (Traitement de donnees personnelles des employes) (Protection of natural persons with regard to the processing of personal data - Processing of data in the context of employment relationships), 2024-12-19

Commission v Hungary (Valeurs de l'Union) (Failure of a Member State to fulfil obligations - National legislation introducing restrictions in relation to deviation from the self-identity corresponding to the sex assigned at birth, gender reassignment, or homosexuality, with a view to protecting children - Judgment) [2026] EUECJ C-769/22

Case C-769/22 Commission v Hungary (Valeurs de l'Union) (Failure of a Member State to fulfil obligations - National legislation introducing restrictions in relation to deviation from the self-identity corresponding to the sex assigned at birth, gender reassignment, or homosexuality, with a view to protecting children) EU:C:2026:326

Hauptpersonalrat der Lehrerinnen und Lehrer beim Hessischen Kultusministerium v Minister des Hessischen Kultusministeriums

Court of Justice of the European Union, Hauptpersonalrat der Lehrerinnen und Lehrer beim Hessischen Kultusministerium v Minister des Hessischen Kultusministeriums, ECLI:EU:C:2023:270, 2023-03-30

RK v Ministerstvo zdravotnictví

RK v Ministerstvo zdravotnictví EU:C:2023:745, 2023-10-05

Meta Platforms Inc and Others v Bundeskartellamt

Court of Justice of the European Union, Meta Platforms Inc and Others v Bundeskartellamt, ECLI:EU:C:2023:537, 2023-07-04

Puskar (Charter of Fundamental Rights of the European Union - Processing of personal data : Judgment) [2017] EUECJ C-73/16

Case C-73/16 Puskar (Charter of Fundamental Rights of the European Union - Processing of personal data :), 2017-09-27

État belge v Autorité de protection des données

Court of Justice of the European Union, État belge v Autorité de protection des données, ECLI:EU:C:2024:7, 2024-01-11

Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens

Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens EU:C:2024:858, 2024-10-04

Osterreichischer Rundfunk & Ors (Approximation of laws) [2003] EUECJ C-139/01

Case C-139/01 Osterreichischer Rundfunk & Ors (Approximation of laws), 2003-05-20

ECLI:EU:C:2026:579

Case C-474/24 EU:C:2026:579

Újpesti Polgarmesteri Hivatal (Protection of natural persons with regard to the processing of personal data - Powers of the supervisory authority of a Member State - Judgment) [2024] EUECJ C-46/23

Case C-46/23 Újpesti Polgarmesteri Hivatal (Protection of natural persons with regard to the processing of personal data - Powers of the supervisory authority of a Member State), 2024-03-14

Koninklijke Nederlandse Lawn Tennisbond (Protection of natural persons with regard to the processing of personal data - Lawfulness of processing - Judgment) en [2024] EUECJ C-621/22

Case C-621/22 Koninklijke Nederlandse Lawn Tennisbond (Protection of natural persons with regard to the processing of personal data - Lawfulness of processing) en, 2024-10-04

Camera di Commercio, Industria, Artigianato e Agricoltura di Lecce v Salvatore Manni

Camera di Commercio, Industria, Artigianato e Agricoltura di Lecce v Salvatore Manni EU:C:2017:197

UZ contre Bundesrepublik Deutschland

UZ contre Bundesrepublik Deutschland EU:C:2023:373, 2023-05-04

Criminal proceedings against ILVA A/S

Criminal proceedings against ILVA A/S EU:C:2025:84, 2025-02-13

RK v Ministerstvo zdravotnictví (Protection of natural persons with regard to the processing of personal data - Concept of 'processing' of personal data, Mobile application, EU Digital COVID Certificates) [2023] EUECJ C-659/22

Case C-659/22 RK v Ministerstvo zdravotnictví (Protection of natural persons with regard to the processing of personal data - Concept of 'processing' of personal data, Mobile application, EU Digital COVID Certificates), 2023-10-05

SO interested parties: Nationale Anti-Doping Agentur Austria GmbH (NADA), Österreichischer Leichtathletikverband (ÖLV), World Anti-Doping Agency (WADA)

Case C-115/22 SO interested parties: Nationale Anti-Doping Agentur Austria GmbH (NADA), Österreichischer Leichtathletikverband (ÖLV), World Anti-Doping Agency (WADA) EU:C:2024:384

Cafpi and Aviva assurances ( Prevention of the use of the financial system for the purpose of money laundering and terrorist financing - Application ) French Text [2022] EUECJ C-691/21

Case C-691/21 Cafpi and Aviva assurances (Prevention of the use of the financial system for the purpose of money laundering and terrorist financing - Application), 2022-01-21

VB v Natsionalna agentsia za prihodite

Court of Justice of the European Union, VB v Natsionalna agentsia za prihodite, ECLI:EU:C:2023:986, 2023-12-14

Osterreichischer Rundfunk & Ors (Approximation of laws) [2003] EUECJ C-465/00

Case C-465/00 Osterreichischer Rundfunk & Ors (Approximation of laws), 2003-05-20

Mario Costeja Gonzalez v Google Spain and Google (Judgment of the Court) [2014] EUECJ C-131/12

Case C-131/12 Mario Costeja Gonzalez v Google Spain and Google (Judgment of the Court), 2014-05-13

European Commission v Poland [2022] EUECJ C-204/21_O

Case C-204/21 European Commission v Poland, 2022-12-15

Ministerstvo zdravotnictvi (Donnees relatives au representant d'une personne morale) (Protection of natural persons with regard to the processing of personal data - Case-law of a national court imposing an obligation to inform and consult the data subject prior to disclosure of official documents - Judgment) [2025] EUECJ C-710/23

Case C-710/23 Ministerstvo zdravotnictvi (Donnees relatives au representant d'une personne morale) (Protection of natural persons with regard to the processing of personal data - Case-law of a national court imposing an obligation to inform and consult the data subject prior to disclosure of official documents) EU:C:2025:231, 2025-04-03

Landeshauptstadt Wiesbaden (Strengthening the security of identity cards of EU citizens - Validity - Judgment) [2024] EUECJ C-61/22

Case C-61/22 Landeshauptstadt Wiesbaden (Strengthening the security of identity cards of EU citizens - Validity), 2024-03-21

BL v MediaMarktSaturn Hagen-Iserlohn GmbH

BL v MediaMarktSaturn Hagen-Iserlohn GmbH EU:C:2024:72, 2024-01-25

ECLI:EU:T:2022:783

Case T-709/21 EU:T:2022:783