GDPR m.58 İlgili Kararlar

Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság

Court of Justice of the European Union, Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság, ECLI:EU:C:2024:239, 2024-03-14

Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit

Court of Justice of the European Union, Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit, ECLI:EU:C:2021:483, 2021-06-15

Verarbeitung medizinischer Diagnosedaten aus Rechnungsdokumenten durch eine private Krankenversicherung zum Zweck individualisierter Angebote von Vorsorgeprogrammen; Geheimhaltungs- und Informationspflichten

Verarbeitung medizinischer Diagnosedaten aus Rechnungsdokumenten durch eine private Krankenversicherung zum Zweck individualisierter Angebote von Vorsorgeprogrammen; Geheimhaltungs- und Informationspflichten, 2026-03-06

Durchsetzung des Einsichtnahmerechts des Bundesdatenschutzbeauftragten in Anordnungen des Präsidenten des Bundesnachrichtendienstes; wehrfähige Rechtsposition eines Hoheitsträgers i. S. d. § 42 Abs. 2 VwGO

Durchsetzung des Einsichtnahmerechts des Bundesdatenschutzbeauftragten in Anordnungen des Präsidenten des Bundesnachrichtendienstes; wehrfähige Rechtsposition eines Hoheitsträgers i. S. d. § 42 Abs. 2 VwGO, 2026-03-04

Rechtsweg für Klagen nach Art. 78 Abs. 2 DSGVO bei Anträgen nach Art. 15 DSGVO bei der Gerichtsverwaltung

Rechtsweg für Klagen nach Art. 78 Abs. 2 DSGVO bei Anträgen nach Art. 15 DSGVO bei der Gerichtsverwaltung, 2025-11-04

Erfordernis eines außergerichtlich gestellten Antrags auf Auskunftserteilung nach Art. 15 DSGVO

Erfordernis eines außergerichtlich gestellten Antrags auf Auskunftserteilung nach Art. 15 DSGVO, 2024-11-12

Gerichtlicher Prüfungsmaßstab nach Art. 78 Abs. 1 DSGVO; Tätigkeit und Mitteilung der Aufsichtsbehörde nach Art. 77 DSGVO

Gerichtlicher Prüfungsmaßstab nach Art. 78 Abs. 1 DSGVO; Tätigkeit und Mitteilung der Aufsichtsbehörde nach Art. 77 DSGVO, 2023-12-12

Verarbeitung der Postanschrift eines Antragstellers nach dem Informationsfreiheitsgesetz

Verarbeitung der Postanschrift eines Antragstellers nach dem Informationsfreiheitsgesetz, 2024-03-20

Regelungen des Gesetzes über die öffentliche Sicherheit und Ordnung Mecklenburg-Vorpommerns (SOG MV) zu bestimmten Befugnissen (besondere Mittel der Datenerhebung, Wohnraumüberwachung, Online-Durchsuchung, Telekommunikationsüberwachung, heimliche Wohnungsbetretung, Ausschreibung zur polizeilichen Beobachtung sowie Rasterfahndung) teilweise verfassungswidrig - Maßgaben zur Fortgeltung bis zu einer Neuregelung, längstens bis Ende 2023

Regelungen des Gesetzes über die öffentliche Sicherheit und Ordnung Mecklenburg-Vorpommerns (SOG MV) zu bestimmten Befugnissen (besondere Mittel der Datenerhebung, Wohnraumüberwachung, Online-Durchsuchung, Telekommunikationsüberwachung, heimliche Wohnungsbetretung, Ausschreibung zur polizeilichen Beobachtung sowie Rasterfahndung) teilweise verfassungswidrig - Maßgaben zur Fortgeltung bis zu einer Neuregelung, längstens bis Ende 2023, 2022-12-09

Verarbeitung öffentlich zugänglicher Kontaktdaten von Zahnarztpraxen zum Zweck der Telefonwerbung ohne Einwilligung; Antrag auf Wiederaufgreifen des Verfahrens wegen Änderung der Rechtslage

Verarbeitung öffentlich zugänglicher Kontaktdaten von Zahnarztpraxen zum Zweck der Telefonwerbung ohne Einwilligung; Antrag auf Wiederaufgreifen des Verfahrens wegen Änderung der Rechtslage, 2025-01-29

Videoüberwachung in Zahnarztpraxis regelmäßig nicht zulässig

Videoüberwachung in Zahnarztpraxis regelmäßig nicht zulässig, 2019-03-27

KANEV AND BULGARIAN HELSINKI COMMITTEE v BULGARIA - 45864/22

KANEV AND BULGARIAN HELSINKI COMMITTEE v BULGARIA - 45864/22 ECtHR (28 April 2026), 2026-04-28

CASE OF M.D. AND OTHERS v. SPAIN

CASE OF M.D. AND OTHERS v SPAIN [Chamber] ECtHR App No 36584/17 (28 June 2022), 2022-06-28

CASE OF BAKA v. HUNGARY

CASE OF BAKA v HUNGARY [GC] ECtHR App No 20261/12 (23 June 2016), 2016-06-23

Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

Binding decision 1/2021 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding WhatsApp Ireland under Article 65(1)(a) GDPR

Binding Decision 4/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Instagram service (Art. 65 GDPR)

Urgent Binding Decision 01/2021 on the request under Article 66(2) GDPR from the Hamburg (German) Supervisory Authority for ordering the adoption of final measures regarding Facebook Ireland Limited

Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR

Binding Decision 2/2022 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Meta Platforms Ireland Limited (Instagram) under Article 65(1)(a) GDPR

Binding Decision 3/2022 on the dispute submitted by the Irish SA on Meta Platforms Ireland Limited and its Facebook service (Art. 65 GDPR)

Binding Decision 1/2023 on the dispute submitted by the Irish SA on data transfers by Meta Platforms Ireland Limited for its Facebook service (Art. 65 GDPR)

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Binding Decision 1/2026 on the dispute submitted by the Belgian SA on Vlaamse Radio-en Televisieomroeporganisatie (VRT) (Art. 65 GDPR)

Binding Decision 5/2022 on the dispute submitted by the Irish SA regarding WhatsApp Ireland Limited (Art. 65 GDPR)

EDPBI:DE:OSS:D:2023:678 — DE SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:DE:OSS:D:2023:678 — DE SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2023-01-16

EDPBI:FR:OSS:D:2024:1528 — FR SA final decision (Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1528 — FR SA final decision (Article 5 (Principles relating to processing of personal data)), 2024-11-15

EDPBI:SE:OSS:D:2022:432 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2022:432 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-07-25

EDPBI:LT:OSS:D:2025:3708 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:LT:OSS:D:2025:3708 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-10

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:SI:OSS:D:2023:680 — SI SA final decision (Article 32 (Security of processing), Article 34 (Communication of a personal data breach to the data subject)), 2023-03-08

EDPBI:SE:OSS:D:2023:1048 — SE SA final decision (Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2023:1048 — SE SA final decision (Article 16 (Right to rectification)), 2023-10-31

EDPBI:EE:OSS:D:2025:1667 — EE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:EE:OSS:D:2025:1667 — EE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-03-07

EDPBI:DE:OSS:D:2025:3773 — AT SA final decision (Article 7 (Conditions for consent))

EDPBI:DE:OSS:D:2025:3773 — AT SA final decision (Article 7 (Conditions for consent)), 2025-11-27

EDPBI:DE:OSS:D:2025:3466 — DK SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2025:3466 — DK SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-14

EDPBI:DE:OSS:D:2021:374 — IT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:374 — IT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-06-21

EDPBI:SE:OSS:D:2025:3763 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3763 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-12-02

EDPBI:CY:OSS:D:2023:970 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2023:970 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-10-09

EDPBI:CY:OSS:D:2024:1264 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2024:1264 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-04-12

EDPBI:SE:OSS:D:2022:381 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2022:381 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2022-06-14

EDPBI:SE:OSS:D:2024:1270 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1270 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-04-11

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:FR:OSS:D:2025:3826 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2025-12-19

EDPBI:SE:OSS:D:2024:1563 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1563 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-12-19

EDPBI:DE:OSS:D:2021:188 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2021:188 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-03-02

EDPBI:ES:OSS:D:2021:338 — ES SA final decision (Article 6 (Lawfulness of processing))

EDPBI:ES:OSS:D:2021:338 — ES SA final decision (Article 6 (Lawfulness of processing)), 2021-07-19

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:BE:OSS:D:2022:325 — BE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2022-02-02

EDPBI:ES:OSS:D:2022:334 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:ES:OSS:D:2022:334 — ES SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-02-23

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2021:308 — AT SA final decision (Article 32 (Security of processing)), 2021-11-10

EDPBI:SE:OSS:D:2024:1527 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1527 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-11-14

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers))

EDPBI:NO:OSS:D:2023:853 — NO SA final decision (Article 44 (General principle for transfers)), 2023-07-26

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:1738 — SE SA final decision (Article 6 (Lawfulness of processing)), 2025-04-28

EDPBI:SE:OSS:D:2025:3654 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3654 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-17

EDPBI:SE:OSS:D:2023:859 — SE SA final decision (Article 32 (Security of processing))

EDPBI:SE:OSS:D:2023:859 — SE SA final decision (Article 32 (Security of processing)), 2023-08-03

EDPBI:SI:OSS:D:2024:1546 — SI SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SI:OSS:D:2024:1546 — SI SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-12-05

EDPBI:DE:OSS:D:2019:53 — AT SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2019:53 — AT SA final decision (Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data)), 2019-10-02

EDPBI:SE:OSS:D:2023:694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2023:694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-03-23

EDPBI:SE:OSS:D:2022:407 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:407 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2022-07-20

EDPBI:FI:OSS:D:2022:627 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:FI:OSS:D:2022:627 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2022-12-27

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:DE:OSS:D:2022:491 — DK SA final decision (Article 24 (Responsibility of the controller), Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2022-09-29

EDPBI:SE:OSS:D:2024:1446 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1446 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-09-20

EDPBI:SE:OSS:D:2025:3690 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3690 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-30

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:AT:OSS:D:2022:357 — AT SA final decision (Article 44 (General principle for transfers), Article 45 (Transfers on the basis of an adequacy decision), Article 46 (Transfers subject to appropriate safeguards)), 2022-04-22

EDPBI:SE:OSS:D:2023:710 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2023:710 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-03-31

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:CY:OSS:D:2021:182 — CY SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority)), 2021-02-17

EDPBI:PL:OSS:D:2021:291 — PL SA final decision (Article 21 (Right to object))

EDPBI:PL:OSS:D:2021:291 — PL SA final decision (Article 21 (Right to object)), 2021-11-10

EDPBI:SE:OSS:D:2024:1362 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:SE:OSS:D:2024:1362 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-06-20

EDPBI:SE:OSS:D:2025:3710 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3710 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-11-12

EDPBI:NO:OSS:D:2022:328 — NO SA final decision (Article 6 (Lawfulness of processing))

EDPBI:NO:OSS:D:2022:328 — NO SA final decision (Article 6 (Lawfulness of processing)), 2022-02-08

EDPBI:SE:OSS:D:2023:651 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2023:651 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-01-19

EDPBI:CY:OSS:D:2025:3611 — CY SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2025:3611 — CY SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-09-30

EDPBI:EE:OSS:D:2024:459 — EE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:EE:OSS:D:2024:459 — EE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2024-12-20

EDPBI:IT:OSS:D:2024:1538 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039)

EDPBI:IT:OSS:D:2024:1538 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 8 (Conditions applicable to child&#039), 2024-11-14

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:LT:OSS:D:2025:3548 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2025-08-05

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:DE:OSS:D:2021:184 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2021-02-02

EDPBI:SE:OSS:D:2021:300 — SE SA final decision (Article 32 (Security of processing))

EDPBI:SE:OSS:D:2021:300 — SE SA final decision (Article 32 (Security of processing)), 2021-11-22

EDPBI:SE:OSS:D:2025:3682 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3682 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-10-29

EDPBI:SE:OSS:D:2021:195 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2021:195 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-03-23

EDPBI:SE:OSS:D:2023:984 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2023:984 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2023-10-31

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller))

EDPBI:IT:OSS:D:2024:1428 — IT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 24 (Responsibility of the controller)), 2024-07-17

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:EE:OSS:D:2024:1176 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2024-02-14

EDPBI:LT:OSS:D:2025:3464 — LT SA final decision (Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:LT:OSS:D:2025:3464 — LT SA final decision (Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-05-13

EDPBI:SE:OSS:D:2023:763 — SE SA final decision (Article 11 (Processing which does not require identification), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2023:763 — SE SA final decision (Article 11 (Processing which does not require identification), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-05-22

EDPBI:SE:OSS:D:2023:652 — SE SA final decision (Article 32 (Security of processing))

EDPBI:SE:OSS:D:2023:652 — SE SA final decision (Article 32 (Security of processing)), 2023-01-19

EDPBI:CY:OSS:D:2023:978 — CY SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2023:978 — CY SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-10-23

EDPBI:DE:OSS:D:2021:229 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:DE:OSS:D:2021:229 — DK SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2021-06-07

EDPBI:SE:OSS:D:2024:1384 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2024:1384 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2024-07-29

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2024:1426 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-09-04

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:825 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:SE:OSS:D:2023:1045 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2023:1045 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-12-04

EDPBI:SE:OSS:D:2025:3765 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3765 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-12-03

EDPBI:CZ:OSS:D:2019:56 — CZ SA final decision (Article 6 (Lawfulness of processing))

EDPBI:CZ:OSS:D:2019:56 — CZ SA final decision (Article 6 (Lawfulness of processing)), 2019-10-07

EDPBI:FI:OSS:D:2023:669 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 32 (Security of processing))

EDPBI:FI:OSS:D:2023:669 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 32 (Security of processing)), 2023-02-16

EDPBI:CY:OSS:D:2025:1615 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:CY:OSS:D:2025:1615 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-01-22

EDPBI:AT:OSS:D:2024:1123 — AT SA final decision (Article 15 (Right of access by the data subject))

EDPBI:AT:OSS:D:2024:1123 — AT SA final decision (Article 15 (Right of access by the data subject)), 2024-02-13

EDPBI:SE:OSS:D:2022:367 — SE SA final decision (Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:367 — SE SA final decision (Article 15 (Right of access by the data subject)), 2022-05-13

EDPBI:FR:OSS:D:2023:963 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:FR:OSS:D:2023:963 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2023-10-05

EDPBI:HU:OSS:D:2020:167 — HU SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject))

EDPBI:HU:OSS:D:2020:167 — HU SA final decision (Article 6 (Lawfulness of processing), Article 15 (Right of access by the data subject)), 2020-12-16

EDPBI:SE:OSS:D:2024:1562 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:SE:OSS:D:2024:1562 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-12-19

EDPBI:AT:OSS:D:2022:424 — AT SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:AT:OSS:D:2022:424 — AT SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-06-23

EDPBI:DE:OSS:D:2021:354 — NL SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2021:354 — NL SA final decision (Article 32 (Security of processing)), 2021-08-10

EDPBI:SE:OSS:D:2024:1312 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2024:1312 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2024-06-10

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2024:1287 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-07

EDPBI:SE:OSS:D:2025:1757 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2025:1757 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-07

EDPBI:BG:OSS:D:2022:791 — BG SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:BG:OSS:D:2022:791 — BG SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2022-07-13

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor))

EDPBI:BG:OSS:D:2023:1066 — BG SA final decision (Article 5 (Principles relating to processing of personal data), Article 25 (Data protection by design and by default), Article 28 (Processor)), 2023-09-13

EDPBI:CY:OSS:D:2024:1265 — CY SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:CY:OSS:D:2024:1265 — CY SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-03-28

EDPBI:CY:OSS:D:2023:927 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller))

EDPBI:CY:OSS:D:2023:927 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 24 (Responsibility of the controller)), 2023-09-07

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:934 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-08-25

EDPBI:SE:OSS:D:2022:366 — SE SA final decision (Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:366 — SE SA final decision (Article 15 (Right of access by the data subject)), 2022-05-11

EDPBI:SE:OSS:D:2025:1689 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:1689 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-03-25

EDPBI:SE:OSS:D:2022:385 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2022:385 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-06-27

EDPBI:DE:OSS:D:2020:156 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject))

EDPBI:DE:OSS:D:2020:156 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject)), 2020-11-02

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority))

EDPBI:EE:OSS:D:2024:445 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 31 (Cooperation with the supervisory authority)), 2024-12-18

EDPBI:EE:OSS:D:2025:1707 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2025:1707 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2025-04-10

EDPBI:SE:OSS:D:2025:3751 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3751 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-26

EDPBI:IE:OSS:D:2024:1115 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2024:1115 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-01-31

EDPBI:IE:OSS:D:2020:159 — IE SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:IE:OSS:D:2020:159 — IE SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2020-11-11

EDPBI:PL:OSS:D:2022:414 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:PL:OSS:D:2022:414 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-07-29

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2022:365 — NO SA final decision (Article 15 (Right of access by the data subject), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-05-10

EDPBI:FI:OSS:D:2022:604 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:FI:OSS:D:2022:604 — FI SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-12-09

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2025:1755 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2025-04-25

EDPBI:SE:OSS:D:2025:1677 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:1677 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject), Article 15 (Right of access by the data subject)), 2025-03-10

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject))

EDPBI:NO:OSS:D:2022:358 — NO SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 15 (Right of access by the data subject)), 2022-04-26

EDPBI:PL:OSS:D:2023:681 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:PL:OSS:D:2023:681 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2023-03-09

EDPBI:DE:OSS:D:2024:1594 — DE SA final decision (Article 4 (Definitions), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:DE:OSS:D:2024:1594 — DE SA final decision (Article 4 (Definitions), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2024-12-13

EDPBI:IE:OSS:D:2023:953 — IE SA final decision (Article 7 (Conditions for consent))

EDPBI:IE:OSS:D:2023:953 — IE SA final decision (Article 7 (Conditions for consent)), 2023-09-28

EDPBI:SE:OSS:D:2022:404 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2022:404 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2022-07-18

EDPBI:DE:OSS:D:2018:9 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:DE:OSS:D:2018:9 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2018-10-31

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:CZ:OSS:D:2024:1278 — CZ SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-04-10

EDPBI:SE:OSS:D:2021:196 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2021:196 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object), Article 6 (Lawfulness of processing)), 2021-03-24

EDPBI:SE:OSS:D:2022:429 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:SE:OSS:D:2022:429 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-07-28

EDPBI:SE:OSS:D:2025:3754 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2025:3754 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2025-11-27

EDPBI:SE:OSS:D:2025:3706 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3706 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 15 (Right of access by the data subject)), 2025-11-10

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2023:665 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2023-02-06

EDPBI:SE:OSS:D:2024:1570 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:SE:OSS:D:2024:1570 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-12-20

EDPBI:SE:OSS:D:2024:1577 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1577 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-12-19

EDPBI:SE:OSS:D:2022:383 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2022:383 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-06-14

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority))

EDPBI:CY:OSS:D:2025:3584 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 31 (Cooperation with the supervisory authority)), 2025-09-04

EDPBI:SE:OSS:D:2025:3687 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3687 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-10-29

EDPBI:SE:OSS:D:2025:1825 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:1825 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-06-30

EDPBI:CY:OSS:D:2024:1120 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:CY:OSS:D:2024:1120 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2024-02-08

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards))

EDPBI:SE:OSS:D:2023:824 — SE SA final decision (Article 4 (Definitions), Article 44 (General principle for transfers), Article 46 (Transfers subject to appropriate safeguards)), 2023-06-30

EDPBI:LT:OSS:D:2025:3588 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:LT:OSS:D:2025:3588 — LT SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-09-12

EDPBI:SE:OSS:D:2024:1094 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1094 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-01-04

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing))

EDPBI:DE:OSS:D:2023:819 — NL SA final decision (Article 32 (Security of processing)), 2023-06-30

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:NL:OSS:D:2020:173 — NL SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-10

EDPBI:LT:OSS:D:2025:3547 — LT SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:LT:OSS:D:2025:3547 — LT SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2025-08-05

EDPBI:SE:OSS:D:2023:790 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2023:790 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2023-06-12

EDPBI:SE:OSS:D:2024:1452 — SE SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent))

EDPBI:SE:OSS:D:2024:1452 — SE SA final decision (Article 6 (Lawfulness of processing), Article 7 (Conditions for consent)), 2024-10-04

EDPBI:EE:OSS:D:2025:1767 — EE SA final decision (Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2025:1767 — EE SA final decision (Article 7 (Conditions for consent), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-12

EDPBI:SE:OSS:D:2024:1530 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2024:1530 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-11-16

EDPBI:IE:OSS:D:2023:1013 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:1013 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-11-15

EDPBI:ES:OSS:D:2020:146 — ES SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:ES:OSS:D:2020:146 — ES SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject)), 2020-10-15

EDPBI:SE:OSS:D:2022:347 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2022:347 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-03-18

EDPBI:SE:OSS:D:2025:3694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3694 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-04

EDPBI:DE:OSS:D:2023:886 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2023:886 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-08-29

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:205 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-03-16

EDPBI:DE:OSS:D:2024:598 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:DE:OSS:D:2024:598 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2024-02-15

EDPBI:SE:OSS:D:2021:237 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2021:237 — SE SA final decision (Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2021-06-16

EDPBI:NO:OSS:D:2021:292 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:NO:OSS:D:2021:292 — NO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-11-11

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:ES:OSS:D:2022:382 — ES SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2022-06-16

EDPBI:SE:OSS:D:2022:506 — SE SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject))

EDPBI:SE:OSS:D:2022:506 — SE SA final decision (Article 6 (Lawfulness of processing), Article 13 (Information to be provided where personal data are collected from the data subject)), 2022-10-10

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:AT:OSS:D:2023:799 — AT SA final decision (Article 32 (Security of processing), Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 (Communication of a personal data breach to the data subject)), 2023-06-17

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:IE:OSS:D:2020:165 — IE SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2020-12-09

EDPBI:SE:OSS:D:2025:3756 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3756 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-28

EDPBI:EE:OSS:D:2022:447 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing))

EDPBI:EE:OSS:D:2022:447 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing)), 2022-08-25

EDPBI:EE:OSS:D:2024:1445 — EE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:EE:OSS:D:2024:1445 — EE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2024-09-20

EDPBI:SE:OSS:D:2024:1424 — SE SA final decision (Article 9 (Processing of special categories of personal data), Article 32 (Security of processing))

EDPBI:SE:OSS:D:2024:1424 — SE SA final decision (Article 9 (Processing of special categories of personal data), Article 32 (Security of processing)), 2024-09-03

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:IE:OSS:D:2023:849 — IE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2023-07-20

EDPBI:SE:OSS:D:2024:1415 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:SE:OSS:D:2024:1415 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2024-08-23

EDPBI:SE:OSS:D:2022:1805 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing))

EDPBI:SE:OSS:D:2022:1805 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing)), 2022-12-15

EDPBI:CY:OSS:D:2023:962 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 34 (Communication of a personal data breach to the data subject))

EDPBI:CY:OSS:D:2023:962 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 15 (Right of access by the data subject), Article 34 (Communication of a personal data breach to the data subject)), 2023-10-04

EDPBI:SE:OSS:D:2022:331 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 11 (Processing which does not require identification))

EDPBI:SE:OSS:D:2022:331 — SE SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 11 (Processing which does not require identification)), 2022-02-16

EDPBI:DE:OSS:D:2023:882 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:DE:OSS:D:2023:882 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2023-08-24

EDPBI:SE:OSS:D:2021:321 — SE SA final decision (Article 6 (Lawfulness of processing))

EDPBI:SE:OSS:D:2021:321 — SE SA final decision (Article 6 (Lawfulness of processing)), 2021-12-19

EDPBI:EE:OSS:D:2025:1791 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:EE:OSS:D:2025:1791 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2025-05-30

EDPBI:SE:OSS:D:2021:299 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2021:299 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 16 (Right to rectification)), 2021-11-22

EDPBI:ES:OSS:D:2025:3595 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:ES:OSS:D:2025:3595 — ES SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-09-23

EDPBI:DE:OSS:D:2022:335 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:DE:OSS:D:2022:335 — PL SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2022-02-23

EDPBI:PL:OSS:D:2020:194 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:PL:OSS:D:2020:194 — PL SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 17 (Right to erasure (‘right to be forgotten’))), 2020-03-23

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:RO:OSS:D:2021:273 — RO SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-08-30

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing))

EDPBI:EE:OSS:D:2023:1070 — EE SA final decision (Article 5 (Principles relating to processing of personal data), Article 24 (Responsibility of the controller), Article 32 (Security of processing)), 2023-12-19

EDPBI:SE:OSS:D:2022:546 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2022:546 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-11-15

EDPBI:DE:OSS:D:2020:152 — DE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:DE:OSS:D:2020:152 — DE SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2020-10-27

EDPBI:ES:OSS:D:2023:944 — ES SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 15 (Right of access by the data subject))

EDPBI:ES:OSS:D:2023:944 — ES SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 15 (Right of access by the data subject)), 2023-09-22

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing))

EDPBI:BG:OSS:D:2023:659 — BG SA final decision (Article 4 (Definitions), Article 5 (Principles relating to processing of personal data), Article 32 (Security of processing)), 2023-01-30

EDPBI:CY:OSS:D:2022:309 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:CY:OSS:D:2022:309 — CY SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2022-01-03

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject))

EDPBI:DE:OSS:D:2021:213 — AT SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)), 2021-04-26

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:SE:OSS:D:2024:1550 — SE SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2024-12-11

EDPBI:AT:OSS:D:2025:1666 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing))

EDPBI:AT:OSS:D:2025:1666 — AT SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 6 (Lawfulness of processing)), 2025-03-07

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority))

EDPBI:AT:OSS:D:2023:860 — AT SA final decision (Article 33 (Notification of a personal data breach to the supervisory authority)), 2023-08-07

EDPBI:SE:OSS:D:2024:1238 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2024:1238 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2024-03-23

EDPBI:SI:OSS:D:2024:1121 — SI SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 32 (Security of processing))

EDPBI:SI:OSS:D:2024:1121 — SI SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)), Article 32 (Security of processing)), 2024-02-09

EDPBI:NO:OSS:D:2022:439 — NO SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:NO:OSS:D:2022:439 — NO SA final decision (Article 15 (Right of access by the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2022-08-19

EDPBI:EE:OSS:D:2025:1656 — EE SA final decision (Article 7 (Conditions for consent))

EDPBI:EE:OSS:D:2025:1656 — EE SA final decision (Article 7 (Conditions for consent)), 2025-02-18

EDPBI:SE:OSS:D:2025:3752 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2025:3752 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2025-11-26

EDPBI:SE:OSS:D:2024:1386 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject))

EDPBI:SE:OSS:D:2024:1386 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject)), 2024-07-31

EDPBI:CY:OSS:D:2021:175 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data))

EDPBI:CY:OSS:D:2021:175 — CY SA final decision (Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 9 (Processing of special categories of personal data)), 2021-01-12

EDPBI:HU:OSS:D:2020:118 — HU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:HU:OSS:D:2020:118 — HU SA final decision (Article 17 (Right to erasure (‘right to be forgotten’))), 2020-06-29

EDPBI:FR:OSS:D:2024:1286 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:FR:OSS:D:2024:1286 — FR SA final decision (Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2024-05-22

EDPBI:SE:OSS:D:2025:3553 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data))

EDPBI:SE:OSS:D:2025:3553 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 21 (Right to object), Article 5 (Principles relating to processing of personal data)), 2025-08-07

EDPBI:IE:OSS:D:2021:356 — IE SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:IE:OSS:D:2021:356 — IE SA final decision (Article 13 (Information to be provided where personal data are collected from the data subject), Article 14 (Information to be provided where personal data have not been obtained from the data subject), Article 5 (Principles relating to processing of personal data)), 2021-08-20

EDPBI:SE:OSS:D:2023:801 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object))

EDPBI:SE:OSS:D:2023:801 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)), Article 21 (Right to object)), 2023-05-27

EDPBI:SE:OSS:D:2024:1098 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification))

EDPBI:SE:OSS:D:2024:1098 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 16 (Right to rectification)), 2024-01-10

EDPBI:SE:OSS:D:2025:3762 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’)))

EDPBI:SE:OSS:D:2025:3762 — SE SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 17 (Right to erasure (‘right to be forgotten’))), 2025-12-12

EDPBI:FR:OSS:D:2024:1583 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data))

EDPBI:FR:OSS:D:2024:1583 — FR SA final decision (Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right of access by the data subject), Article 5 (Principles relating to processing of personal data)), 2024-12-05

Deutsche Wohnen SE v Staatsanwaltschaft Berlin

Court of Justice of the European Union, Deutsche Wohnen SE v Staatsanwaltschaft Berlin, ECLI:EU:C:2023:950, 2023-12-05

Nacionalinis visuomenės sveikatos centras prie Sveikatos apsaugos ministerijos v Valstybinė duomenų apsaugos inspekcija

Court of Justice of the European Union, Nacionalinis visuomenės sveikatos centras prie Sveikatos apsaugos ministerijos v Valstybinė duomenų apsaugos inspekcija, ECLI:EU:C:2023:949, 2023-12-05

Commission v Hungary (Judgment of the Court) [2014] EUECJ C-288/12

Case C-288/12 Commission v Hungary (Judgment of the Court), 2014-04-08

Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes - Judgment) [2020] EUECJ C-311/18

Case C-311/18 Facebook Ireland and Schrems (Protection of individuals with regard to the processing of personal data - Transfers of personal data to third countries for commercial purposes), 2020-07-16

European Commission v Federal Republic of Germany

Case C-518/07 European Commission v Federal Republic of Germany EU:C:2010:125

CK v Magistrat der Stadt Wien

Court of Justice of the European Union, CK v Magistrat der Stadt Wien, ECLI:EU:C:2025:117, 2025-02-27

Camera di Commercio, Industria, Artigianato e Agricoltura di Lecce v Salvatore Manni

Camera di Commercio, Industria, Artigianato e Agricoltura di Lecce v Salvatore Manni EU:C:2017:197

Fashion ID GmbH & Co.KG v Verbraucherzentrale NRW eV

Fashion ID GmbH & Co.KG v Verbraucherzentrale NRW eV EU:C:2019:629

Ormaetxea Garai and Lorenzo Almendros (Judgment) [2016] EUECJ C-424/15

Case C-424/15 Ormaetxea Garai and Lorenzo Almendros EU:C:2016:780

European Commission v Hungary

Case C-288/12 European Commission v Hungary EU:C:2014:237

European Commission v Republic of Austria

Case C-614/10 European Commission v Republic of Austria EU:C:2012:631

UF and AB v Land Hessen

Court of Justice of the European Union, UF and AB v Land Hessen, ECLI:EU:C:2023:958, 2023-12-07

Data Protection Commission , established in Dublin (Ireland) v European Data Protection Board

Case T-70/23 Data Protection Commission , established in Dublin (Ireland) v European Data Protection Board EU:T:2025:116

Meta Platforms Inc and Others v Bundeskartellamt

Court of Justice of the European Union, Meta Platforms Inc and Others v Bundeskartellamt, ECLI:EU:C:2023:537, 2023-07-04

Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González

Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González EU:C:2014:317

ECLI:EU:T:2025:435

Case T-319/24 EU:T:2025:435

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, interveners: Facebook Ireland Ltd, Vertreter des Bundesinteresses beim Bundesverwaltungsgericht

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein v Wirtschaftsakademie Schleswig-Holstein GmbH, interveners: Facebook Ireland Ltd, Vertreter des Bundesinteresses beim Bundesverwaltungsgericht EU:C:2018:388

Commission v Austria [2012] EUECJ C-614/10

Case C-614/10 Commission v Austria, 2012-07-03

ECLI:EU:C:2026:493

Case C-414/24 EU:C:2026:493, 2026-06-18

Digital Rights Ireland (Judgment of the Court) [2014] EUECJ C-293/12

Case C-293/12 Digital Rights Ireland (Judgment of the Court), 2014-04-08

Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources, Minister for Justice, Equality and Law Reform, Commissioner of the Garda Síochána, Ireland, The Attorney General, intervener: Irish Human Rights Commission, and Kärntner Landesregierung, Michael Seitlinger, Christof Tschohl and others

Digital Rights Ireland Ltd v Minister for Communications, Marine and Natural Resources, Minister for Justice, Equality and Law Reform, Commissioner of the Garda Síochána, Ireland, The Attorney General, intervener: Irish Human Rights Commission, and Kärntner Landesregierung, Michael Seitlinger, Christof Tschohl and others EU:C:2014:238

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd

Maximillian Schrems v Data Protection Commissioner, joined party: Digital Rights Ireland Ltd EU:C:2015:650

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems

Court of Justice of the European Union, Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems, ECLI:EU:C:2020:559, 2020-07-16

GC and Others (Personal data - Protection of individuals with regard to the processing of personal data contained on websites Judgment - Grand Chamber) [2019] EUECJ C-136/17

Case C-136/17 GC and Others (Personal data - Protection of individuals with regard to the processing of personal data contained on websites Judgment - Grand Chamber), 2019-09-24

Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges - Judgment) [2025] EUECJ C-313/23

Case C-313/23 Inspektorat kam Visshia sadeben savet (Rule of law - Judicial independence - disciplinary proceedings against judges) EU:C:2025:303, 2025-04-30

Commission v Germany (Transposition des directives 2009/72 et 2009/73) (Failure of a Member State to fulfil obligations - Internal markets for electricity and natural gas - Opinion) [2021] EUECJ C-718/18_O

Case C-718/18 Commission v Germany (Transposition des directives 2009/72 et 2009/73) (Failure of a Member State to fulfil obligations - Internal markets for electricity and natural gas), 2021-01-14

UZ contre Bundesrepublik Deutschland

UZ contre Bundesrepublik Deutschland EU:C:2023:373, 2023-05-04

Schrems v Data Protection Commissioner (Opinion) [2015] EUECJ C-362/14_0

Case C-362/14 Schrems v Data Protection Commissioner, 2015-09-23

ECLI:EU:C:2026:579

Case C-474/24 EU:C:2026:579

Commission v Austria [2012] EUECJ C-614/10

Case C-614/10 Commission v Austria, 2012-10-16

Commission v Germany (Research, information, education, statistics) [2009] EUECJ C-518/07_O

Case C-518/07 Commission v Germany (Research, information, education, statistics), 2009-11-12

Újpesti Polgarmesteri Hivatal (Protection of natural persons with regard to the processing of personal data - Powers of the supervisory authority of a Member State - Judgment) [2024] EUECJ C-46/23

Case C-46/23 Újpesti Polgarmesteri Hivatal (Protection of natural persons with regard to the processing of personal data - Powers of the supervisory authority of a Member State), 2024-03-14

TR v Land Hessen

Court of Justice of the European Union, TR v Land Hessen, ECLI:EU:C:2024:785, 2024-09-26

ECLI:EU:C:2026:52

Case C-291/24 EU:C:2026:52, 2026-01-29

Komisia za zashtita na lichnite danni and Tsentralna izbiratelna komisia v Koalitsia „Demokratichna Bulgaria - Obedinenie“

Court of Justice of the European Union, Komisia za zashtita na lichnite danni and Tsentralna izbiratelna komisia v Koalitsia „Demokratichna Bulgaria - Obedinenie“, ECLI:EU:C:2022:813, 2022-10-20

Rynes (Advocate General's Opinion) (French Text) [2014] EUECJ C-212/13_O

Case C-212/13 Rynes (Advocate General's), 2014-07-10

WhatsApp Ireland v EDPB (Protection of natural persons with regard to the processing of personal data - Dispute resolution by the European Data Protection Board - Judgment) [2026] EUECJ C-97/23P

Case C-97/23 WhatsApp Ireland v EDPB (Protection of natural persons with regard to the processing of personal data - Dispute resolution by the European Data Protection Board) EU:C:2026:81

ECLI:EU:C:2026:564

Case C-199/24 EU:C:2026:564, 2026-07-09

Weltimmo s. r. o. v Nemzeti Adatvédelmi és Információszabadság Hatóság

Weltimmo s. r. o. v Nemzeti Adatvédelmi és Információszabadság Hatóság EU:C:2015:639

Fashion ID (Data protection - Judgment) [2019] EUECJ C-40/17

Case C-40/17 Fashion ID (Data protection), 2019-07-29

Agentsia po vpisvaniyata v OL

Court of Justice of the European Union, Agentsia po vpisvaniyata v OL, ECLI:EU:C:2024:827, 2024-10-04

GC and Others v Commission nationale de l'informatique et des libertés (CNIL)

GC and Others v Commission nationale de l'informatique et des libertés (CNIL) EU:C:2019:773

Criminal proceedings against ILVA A/S

Criminal proceedings against ILVA A/S EU:C:2025:84, 2025-02-13

Commission v Germany (Research, information, education, statistics) [2010] EUECJ C-518/07

Case C-518/07 Commission v Germany (Research, information, education, statistics), 2010-03-09

ECLI:EU:T:2022:783

Case T-709/21 EU:T:2022:783

Mario Costeja Gonzalez v Google Spain and Google (Judgment of the Court) [2014] EUECJ C-131/12

Case C-131/12 Mario Costeja Gonzalez v Google Spain and Google (Judgment of the Court), 2014-05-13

Agentsia po vpisvaniyata (Protection of natural persons with regard to the processing of personal data - Judgment) en [2024] EUECJ C-200/23

Case C-200/23 Agentsia po vpisvaniyata (Protection of natural persons with regard to the processing of personal data) en, 2024-10-04

Conseil d'État, 10ème chambre, 12/07/2024, 488687, Inédit au recueil Lebon

Conseil d'État, 10ème chambre, 12/07/2024, 488687, Inédit au recueil Lebon, 2024-07-12

Délibération SAN-2023-017 du 11 décembre 2023

Délibération SAN-2023-017 du 11 décembre 2023, 2023-12-11

Délibération SAN-2017-006 du 27 avril 2017

Délibération SAN-2017-006 du 27 avril 2017, 2017-04-27

Délibération SAN-2018-011 du 19 décembre 2018

Délibération SAN-2018-011 du 19 décembre 2018, 2018-12-19

Conseil d'État, 10ème - 9ème chambres réunies, 19/07/2017, 399922

Conseil d'État, 10ème - 9ème chambres réunies, 19/07/2017, 399922, 2017-07-19

Datatilsynet (Norway) - 20/02066

Datatilsynet (Norway) - 20/02066, 2022-05-27

ANSPDCP (Romania) - SC C&V Water Control SA

ANSPDCP (Romania) - SC C&V Water Control SA, 2020-11-20

IMY (Sweden) - DI-2020-10696

IMY (Sweden) - DI-2020-10696, 2022-06-27

Tietosuojavaltuutetun toimisto (Finland) - 128/182/19

Tietosuojavaltuutetun toimisto (Finland) - 128/182/19, 2023-12-04

AEPD (Spain) - PS/00397/2019

BVwG - W 108 2284491-1

BVwG - W 108 2284491-1, 2024-07-31

DSB (Austria) - DSB-D130.1174

DSB (Austria) - DSB-D130.1174, 2023-09-19

Datatilsynet (Norway) - 20/02144

Datatilsynet (Norway) - 20/02144, 2023-01-09

IP - 07121-1/2021/400

IP - 07121-1/2021/400, 2021-03-19

BVwG - W108 2285546-1/22E

BVwG - W108 2285546-1/22E, 2024-10-25

Datatilsynet (Norway) - 20/03771-17

Datatilsynet (Norway) - 20/03771-17, 2023-07-26

Tietosuojavaltuutetun toimisto (Finland) - 1788/152/22

Tietosuojavaltuutetun toimisto (Finland) - 1788/152/22, 2022-05-05

TA Luxembourg - 46578

TA Luxembourg - 46578, 2025-03-18

IDPC (Malta) - CPD/COMP/282/2024

Persónuvernd (Island) - 2021091877

Persónuvernd (Island) - 2021091877, 2023-12-14

ANSPDCP (Romania) - Asociația Asistenței Rutiere A-Car Vaslui

Datatilsynet (Norway) - 0/02422

Datatilsynet (Norway) - 0/02422, 2023-02-06

Datainspektionen - DI-2019-3839

Datainspektionen - DI-2019-3839, 2020-12-02

Commissioner (Cyprus) - Housing Finance Corporation

Commissioner (Cyprus) - Housing Finance Corporation, 2025-03-10

AZOP (Croatia) - Decision 29-11-2021

AZOP (Croatia) - Decision 29-11-2021, 2021-11-29

HDPA (Greece) - 2/2026

HDPA (Greece) - 2/2026, 2026-02-11

APD/GBA (Belgium) - 80/2020

APD/GBA (Belgium) - 80/2020, 2020-09-17

Datatilsynet (Norway) - 22/00049-13

Datatilsynet (Norway) - 22/00049-13, 2026-06-01

AP (The Netherlands) - 24.03.2020

ANSPDCP (Romania) - Asociația de Proprietari Aviației Park

ANSPDCP (Romania) - Asociația de Proprietari Aviației Park, 2022-05-27

AEPD (Spain) - EXP202103983

AEPD (Spain) - EXP202103983, 2022-05-05

AEPD (Spain) - PS/00388/2022

HDPA (Greece) - 27/2024

HDPA (Greece) - 27/2024, 2023-06-21

AP (The Netherlands) - z2019-28837

AP (The Netherlands) - z2019-28837, 2020-07-30

Court of Appeal of Brussels - 2020/AR/1111

Court of Appeal of Brussels - 2020/AR/1111, 2021-06-30

AEPD (Spain) - PS/00483/2021

AEPD (Spain) - PS/00483/2021, 2022-01-03

AEPD (Spain) - PS/00477/2019

US Zagreb - Us I-2208/2024-6

US Zagreb - Us I-2208/2024-6, 2025-04-18

HDPA (Greece) - 12/2021

HDPA (Greece) - 12/2021, 2021-02-17

FiS - 6034-24

FiS - 6034-24, 2024-07-17

HDPA (Greece) - 41 /2025

HDPA (Greece) - 41 /2025, 2025-11-07

CTPDA (Andalusia) - RPS-2023/001

HDPA (Greece) - 5/2026

IP (Slovenia) - 0600-43/2024/12

IP (Slovenia) - 0600-43/2024/12, 2025-03-20

IMY (Sweden) - IMY-2025-7801

IMY (Sweden) - IMY-2025-7801, 2026-01-26

HDPA (Greece) - 41/2019

HDPA (Greece) - 41/2019, 2019-12-11

Tallinna Halduskohus - 3-19-579

Tallinna Halduskohus - 3-19-579, 2019-11-22

NAIH (Hungary) - 7905/2025

NAIH (Hungary) - 7905/2025, 2025-02-17

DSB (Austria) - D135.027 2025-0.477.534

DSB (Austria) - D135.027 2025-0.477.534, 2025-10-08

ANSPDCP (Romania) - Das Sense Society SRL

AEPD (Spain) - EXP202102430

AEPD (Spain) - EXP202102430, 2023-09-07

AEPD (Spain) - PS/00467/2020

AEPD (Spain) - PS/00467/2020, 2021-07-19

HDPA (Greece) - 6/2020

HDPA (Greece) - 6/2020, 2020-03-27

Datatilsynet (Denmark) - 2021-31-5553

Datatilsynet (Denmark) - 2021-31-5553, 2023-02-08

BVwG - W274 2214412-1

BVwG - W274 2214412-1, 2020-12-04

BVerwG - 6 C 7.24

BVerwG - 6 C 7.24, 2026-03-06

AEPD (Spain) - EXP202405119

Persónuvernd (Island) - 2022020363

Persónuvernd (Island) - 2022020363, 2023-12-06

HDPA (Greece) - 15/2025

HDPA (Greece) - 15/2025, 2025-01-15

BVwG - W214 2225733-1

BVwG - W214 2225733-1, 2021-12-09

AEPD (Spain) - PS/00273/2019

NAIH (Hungary) - NAIH-5209-29/2025

NAIH (Hungary) - NAIH-5209-29/2025, 2025-12-02

Datatilsynet (Norway) - 23/00708

Datatilsynet (Norway) - 23/00708, 2023-11-27

APD/GBA (Belgium) - 38/2021

APD/GBA (Belgium) - 38/2021, 2021-03-23

IP - 07121-1/2021/517

IP - 07121-1/2021/517, 2021-03-17

AEPD (Spain) - PS/00037/2020

ANSPDCP (Romania) - Vodafone România SA 1

ANSPDCP (Romania) - Vodafone România SA 1, 2020-02-11

EDPB - Binding Decision 1/2026

EDPB - Binding Decision 1/2026, 2026-05-28

CNIL (France) - SAN-2025-004

CNIL (France) - SAN-2025-004, 2025-09-01

AKI (Estonia) - 14.02.2024

AKI (Estonia) - 14.02.2024, 2024-02-14

BVwG - W258 2217446-1

BVwG - W258 2217446-1, 2020-11-26

DPC (Ireland) - Meta Ireland

DPC (Ireland) - Meta Ireland, 2024-09-27

AKI (Estonia) - 2.1.-1/22/1396