Laws · GDPR ·art-5-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Personal data shall be:
How it connects
Cited by
- What Happened to the Risk-Based Approach to Data Transfers?
- DeFine is a calculator for GDPR fines based on method of the EDPB
- Guidelines 02/2024 on Article 48 GDPR
- Guidelines 01/2022 on data subject rights - Right of access
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
All 1410
- Guidelines 3/2019 on processing of personal data through video devices
- Guidelines 04/2022 on the calculation of administrative fines under the GDPR
- Guidelines 07/2020 on the concepts of controller and processor in the GDPR
- Guidelines 8/2020 on the targeting of social media users
- Guidelines 02/2021 on virtual voice assistants
- Private car owner: Insufficient legal basis for data processing
- Private person: Insufficient legal basis for data processing
- Mayor: Insufficient legal basis for data processing
- Bank: Insufficient legal basis for data processing
- Telecommunication service provider: Insufficient legal basis for data processing
- Bank: Insufficient legal basis for data processing
- Car renting company: Insufficient fulfilment of information obligations
- CZECH REPUBLIC DPA: Non-compliance with general data processing principles
- Taxa 4x35: Non-compliance with general data processing principles
- IDdesign A / S: Non-compliance with general data processing principles
- SERGIC (Real Estate): Insufficient technical and organisational measures to ensure information security
- Bank: Non-compliance with general data processing principles
- Debt collector: Non-compliance with general data processing principles
- Mayor's Office of the city of Kecdkemét: Insufficient legal basis for data processing
- Unnamed financial institution: Insufficient fulfilment of data subjects rights
- Bergen Municipality: Insufficient technical and organisational measures to ensure information security
- Public Hospital: Insufficient technical and organisational measures to ensure information security
- Professional Football League (LaLiga): Insufficient fulfilment of information obligations
- Employer UNIONTRAD COMPANY: Insufficient legal basis for data processing
- HUNGARY DPA: Insufficient legal basis for data processing
- Medical centers: Insufficient legal basis for data processing
- A.P. EOOD: Insufficient legal basis for data processing
- UNICREDIT BANK SA: Insufficient technical and organisational measures to ensure information security
- British Airways: Insufficient technical and organisational measures to ensure information security
- Organizer of SZIGET festival and VOLT festival: Insufficient legal basis for data processing
- PWC Business Solutions: Insufficient legal basis for data processing
- UTTIS INDUSTRIES SRL: Insufficient fulfilment of information obligations
- School in Skellefteå: Insufficient legal basis for data processing
- Merchant: Non-compliance with general data processing principles
- Telecommunication Service Provider: Non-compliance with general data processing principles
- Inteligo Media SA: Insufficient legal basis for data processing
- Austrian Post: Insufficient legal basis for data processing
- VODAFONE ONO, S.A.U.: Non-compliance with general data processing principles
- TELEFONICA MOVILES ESPAÑA, S.A.U.: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient technical and organisational measures to ensure information security
- Employer: Non-compliance with general data processing principles
- Employer: Non-compliance with general data processing principles
- AMADOR RECREATIVOS, S.L: Non-compliance with general data processing principles
- Megastar SL: Non-compliance with general data processing principles
- Sports Bar: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- The Ministry of Interior Affairs: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- Allseas Marine S.A.: Non-compliance with general data processing principles
- Entirely Shipping & Trading S.R.L.: Non-compliance with general data processing principles
- Entirely Shipping & Trading S.R.L.: Non-compliance with general data processing principles
- Grupo Valsor Y Losan, S.L.: Insufficient technical and organisational measures to ensure information security
- Vodafone España, S.A.U.: Insufficient technical and organisational measures to ensure information security
- Xfera Moviles S.A.: Insufficient technical and organisational measures to ensure information security
- Azienda Ospedaliero Universitaria Integrata di Verona (Hospital): Insufficient technical and organisational measures to ensure information security
- Sapienza Università di Roma: Insufficient technical and organisational measures to ensure information security
- Casa Gracio Operation: Non-compliance with general data processing principles
- AEMA Hispánica: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient technical and organisational measures to ensure information security
- Gesthotel Activos Balagares: Non-compliance with general data processing principles
- Hørsholm Municipality: Insufficient technical and organisational measures to ensure information security
- Gladsaxe Municipality: Insufficient technical and organisational measures to ensure information security
- National Center of Addiction Medicine ('SAA'): Insufficient technical and organisational measures to ensure information security
- Breiðholt Upper Secondary School: Insufficient technical and organisational measures to ensure information security
- Rælingen Municipality: Insufficient technical and organisational measures to ensure information security
- Restaurant: Non-compliance with general data processing principles
- Vodafone Romania: Insufficient technical and organisational measures to ensure information security
- Centro De Estudio Dirigidos Delta, S.L.: Non-compliance with general data processing principles
- Property Owner: Non-compliance with general data processing principles
- Xfera Moviles S.A.: Insufficient legal basis for data processing
- Bergen Municipality: Insufficient technical and organisational measures to ensure information security
- Property Owner: Non-compliance with general data processing principles
- Digi Távközlési Szolgáltató Kft. ('Digi') (electronic communication service provider): Insufficient technical and organisational measures to ensure information security
- Vodafone España, SAU: Non-compliance with general data processing principles
- Arp Hansen Hotel Group A/S: Non-compliance with general data processing principles
- Spartoo: Non-compliance with general data processing principles
- Restaurant: Non-compliance with general data processing principles
- Party of the Socialists of Catalonia: Non-compliance with general data processing principles
- Bankia S.A.: Non-compliance with general data processing principles
- Basketball Federation of Castilla and Leon: Insufficient legal basis for data processing
- Barcelona Airport Security Guard Association ('AVSAB'): Non-compliance with general data processing principles
- Sanatatea Press Group S.R.L.: Insufficient technical and organisational measures to ensure information security
- Istituto Comprensivo Statale Crucoli Torretta: Insufficient technical and organisational measures to ensure information security
- Azienda Ospedaliera di Rilievo Nazionale 'Antonio Cardarelli' (Private Hospital): Insufficient technical and organisational measures to ensure information security
- Scanshare s.r.l.: Insufficient technical and organisational measures to ensure information security
- Café Restaurante B.B.B: Non-compliance with general data processing principles
- Private Person: Non-compliance with general data processing principles
- Caja Rural San José de Nules S. Cooperativa de Crédito: Non-compliance with general data processing principles
- Bank of Cyprus Public Company Ltd: Insufficient technical and organisational measures to ensure information security
- Vilnius City Municipality Administration: Non-compliance with general data processing principles
- Play Orenes, S.L.: Non-compliance with general data processing principles
- Vodafone Italia S.p.A.: Non-compliance with general data processing principles
- Ticketmaster UK Limited: Insufficient technical and organisational measures to ensure information security
- Homeowners Association: Non-compliance with general data processing principles
- Carrefour Banque: Non-compliance with general data processing principles
- Private Individual: Insufficient legal basis for data processing
- Private Individual: Insufficient legal basis for data processing
- Comercio Online Levante, S.L.: Insufficient technical and organisational measures to ensure information security
- Aleris Sjukvård AB: Insufficient technical and organisational measures to ensure information security
- Aleris Sjukvård AB: Insufficient technical and organisational measures to ensure information security
- Östergötland Region: Insufficient technical and organisational measures to ensure information security
- Västerbotten Region: Insufficient technical and organisational measures to ensure information security
- Sahlgrenska University Hospital: Insufficient technical and organisational measures to ensure information security
- Karolinska University Hospital of Solna: Insufficient technical and organisational measures to ensure information security
- Capio St. Göran AB: Insufficient technical and organisational measures to ensure information security
- Private Individual: Non-compliance with general data processing principles
- Losada Advocats S.L.: Insufficient technical and organisational measures to ensure information security
- SPAIN DPA: Non-compliance with general data processing principles
- Umeå University: Insufficient technical and organisational measures to ensure information security
- Virgin Mobile Polska: Insufficient technical and organisational measures to ensure information security
- Banca Transilvania SA: Insufficient technical and organisational measures to ensure information security
- HUNGARY DPA: Insufficient fulfilment of information obligations
- Banco Bilbao Vizcaya Argentaria, S.A.: Non-compliance with general data processing principles
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- BELGIUM DPA: Insufficient fulfilment of data subjects rights
- Reti Televisive Italiane S.p.a.: Non-compliance with general data processing principles
- Concentrix Cvg Italy s.r.l.: Insufficient legal basis for data processing
- ING Bank N.V. Amsterdam - Bucharest office: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- Innovasjon Norge: Insufficient legal basis for data processing
- Perfomeclic: Insufficient legal basis for data processing
- ID Finance Poland Sp. z o.o.: Insufficient technical and organisational measures to ensure information security
- L. Sp. z o.o.: Non-compliance with general data processing principles
- Gaypa s.r.l.: Non-compliance with general data processing principles
- Borgo Fonte Scura s.r.l.: Insufficient legal basis for data processing
- HUNGARY DPA: Non-compliance with general data processing principles
- Coop Finnmark SA: Insufficient legal basis for data processing
- Individual: Non-compliance with general data processing principles
- Roma Capitale (Rome Municipality): Non-compliance with general data processing principles
- Miropass S.r.l.: Insufficient legal basis for data processing
- BELGIUM DPA: Insufficient technical and organisational measures to ensure information security
- Azienda Unità Sanitaria Locale Toscana Sud Est: Non-compliance with general data processing principles
- IDFINANCE Spain, S.L.: Insufficient technical and organisational measures to ensure information security
- Charly Mike s.r.l.: Insufficient legal basis for data processing
- Iberdrola Clientes: Insufficient fulfilment of data subjects rights
- Private Person: Non-compliance with general data processing principles
- Private Person: Non-compliance with general data processing principles
- University College Dublin: Insufficient technical and organisational measures to ensure information security
- Agenzia regionale protezione ambientale Campania (ARPAC): Insufficient technical and organisational measures to ensure information security
- Azienda sanitaria provinciale di Enna: Insufficient legal basis for data processing
- Azienda USL della Romagna: Non-compliance with general data processing principles
- Azienda Ospedaliero Universitaria Senese: Non-compliance with general data processing principles
- Azienda Ospedaliero Universitaria di Parma: Non-compliance with general data processing principles
- Azienda Usl di Bologna: Non-compliance with general data processing principles
- Krajowa Szkoła Sądownictwa i Prokuratury: Insufficient technical and organisational measures to ensure information security
- Ripobruna 207, S.L.: Non-compliance with general data processing principles
- HUNGARY DPA: Insufficient legal basis for data processing
- Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics): Insufficient legal basis for data processing
- Nacionaliniam visuomenės sveikatos centrui (NVSC): Non-compliance with general data processing principles
- IT sprendimai sėkmei: Non-compliance with general data processing principles
- I-DE Redes Eléctricas Inteligentes, S.A.U: Non-compliance with general data processing principles
- Hellenic Bank: Insufficient technical and organisational measures to ensure information security
- Homeowners Association: Non-compliance with general data processing principles
- Hospital Campogrande DE: Non-compliance with general data processing principles
- Comune di Santo Stefano Belbo: Non-compliance with general data processing principles
- Comune di Luino: Non-compliance with general data processing principles
- Istituto Nazionale Previdenza Sociale (INPS): Non-compliance with general data processing principles
- Xfera Moviles S.A.: Insufficient technical and organisational measures to ensure information security
- Private Person: Non-compliance with general data processing principles
- Certime S.A.: Non-compliance with general data processing principles
- Ministero dello Sviluppo Economico: Non-compliance with general data processing principles
- School: Insufficient legal basis for data processing
- Asesoría Alpi-Clúa S.L.: Non-compliance with general data processing principles
- Laboratorio Octogón, S.L.: Non-compliance with general data processing principles
- Comune di Conflenti: Insufficient legal basis for data processing
- Dragefossen AS: Insufficient legal basis for data processing
- Comune di Commezzadura: Insufficient legal basis for data processing
- Fondazione di religione e di culto “Casa sollievo della sofferenza” Opera di San Pio da Pietrelcina: Insufficient legal basis for data processing
- Gedi Gruppo Editoriale S.p.A.: Insufficient legal basis for data processing
- Ministero dell’Istruzione, Ufficio Scolastico Regionale per il Lazio: Insufficient legal basis for data processing
- Istituti ospedalieri bergamaschi: Insufficient technical and organisational measures to ensure information security
- Miljø- og Kvalitetsledelse AS: Insufficient legal basis for data processing
- Ski rental company: Non-compliance with general data processing principles
- S.C. Tip Top Food Industry S.R.L: Insufficient legal basis for data processing
- Ιγνατιάδης Νικόλαος και ΣΙΑ Ε.Ε.: Non-compliance with general data processing principles
- Private Individual: Non-compliance with general data processing principles
- Pub owner: Non-compliance with general data processing principles
- CZECH REPUBLIC DPA: Insufficient legal basis for data processing
- Private Individual: Non-compliance with general data processing principles
- Comune di San Marco in Lamis: Insufficient legal basis for data processing
- Healthcare provider: Insufficient fulfilment of information obligations
- CZECH REPUBLIC DPA: Non-compliance with general data processing principles
- Municipality: Insufficient legal basis for data processing
- CZECH REPUBLIC DPA: Insufficient legal basis for data processing
- CZECH REPUBLIC DPA: Non-compliance with general data processing principles
- Equifax Iberica S.L.: Insufficient legal basis for data processing
- Municipality of Enschede: Insufficient legal basis for data processing
- Mediacom s.r.l.: Insufficient legal basis for data processing
- Planet Group Spa: Insufficient legal basis for data processing
- Financial company: Insufficient technical and organisational measures to ensure information security
- ParkkiPate Oy: Insufficient fulfilment of data subjects rights
- Disqus Inc.: Insufficient legal basis for data processing
- Comune di Castellanza: Insufficient legal basis for data processing
- Website operator: Non-compliance with general data processing principles
- Operator of a care facility: Insufficient legal basis for data processing
- A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ: Non-compliance with general data processing principles
- Società triveneta di chirurgia: Insufficient legal basis for data processing
- Physician: Insufficient legal basis for data processing
- Banca Comercială Română S.A.: Insufficient legal basis for data processing
- Comune di Palermo: Insufficient technical and organisational measures to ensure information security
- Company: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Alava Norte, S.L.: Non-compliance with general data processing principles
- Desolasol Restauración, S.L.: Non-compliance with general data processing principles
- Innovasjon Norge: Insufficient legal basis for data processing
- Private Individual: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Fondazione Policlinico Tor Vergata di Roma: Non-compliance with general data processing principles
- Istituto Nazionale Previdenza Sociale (INPS): Insufficient fulfilment of data subjects rights
- Radiotelevisión del principado de Asturias: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Region Sörmland: Insufficient fulfilment of information obligations
- Region Värmland: Insufficient fulfilment of information obligations
- Region Stockholm: Insufficient fulfilment of information obligations
- MedHelp AB: Non-compliance with general data processing principles
- Directorate of the Östra Skaraborg Rescue Service: Non-compliance with general data processing principles
- PURPLE SEA MΟΝΟΠΡΟΣΩΠΗ ΙΚΕ: Non-compliance with general data processing principles
- UAB VS FITNESS: Non-compliance with general data processing principles
- Storstockholms Lokaltrafik: Insufficient legal basis for data processing
- BRICO PRIVÉ: Non-compliance with general data processing principles
- TNT EXPRESS WORLDWIDE SPAIN, S.L.: Non-compliance with general data processing principles
- Iren Mercato S.p.A.: Insufficient legal basis for data processing
- Huppuís ehf: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Foodinho s.r.l.: Non-compliance with general data processing principles
- Magazine publisher: Insufficient legal basis for data processing
- Comune di Bolzano: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Dentist: Insufficient legal basis for data processing
- Mermaids: Insufficient technical and organisational measures to ensure information security
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Aparcamiento Arcusa S.L.U.: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- SGAM AG2R LA MONDIALE: Non-compliance with general data processing principles
- Azienda Usl della Romagna: Non-compliance with general data processing principles
- Azienda Provinciale per i Servizi Sanitari di Trento: Non-compliance with general data processing principles
- Mercadona S.A.: Insufficient legal basis for data processing
- PODEMOS PARTIDO POLÍTICO: Non-compliance with general data processing principles
- Owners Association: Non-compliance with general data processing principles
- Owners Association: Non-compliance with general data processing principles
- Higher Education Institution: Non-compliance with general data processing principles
- Private Individual: Insufficient legal basis for data processing
- Deliveroo Italy s.r.l.: Non-compliance with general data processing principles
- Private Individual: Non-compliance with general data processing principles
- UST GLOBAL ESPAÑA, S.A.: Non-compliance with general data processing principles
- INSTAPACK, S.L.: Insufficient legal basis for data processing
- Private Individual: Non-compliance with general data processing principles
- Private Individual: Non-compliance with general data processing principles
- Aeroporto Guglielmo Marconi di Bologna S.p.a.: Insufficient technical and organisational measures to ensure information security
- DESPACHO TEJEDOR INFANTES CONSULTORES ASESORES: Non-compliance with general data processing principles
- Magyar Telekom Nyrt.: Insufficient fulfilment of data subjects rights
- President of the Zgierz District Court: Insufficient technical and organisational measures to ensure information security
- Owners Association: Non-compliance with general data processing principles
- WhatsApp Ireland Ltd.: Insufficient fulfilment of information obligations
- Furnishyourspace S.L.: Insufficient fulfilment of information obligations
- Automecanica Jerez, S.L.: Insufficient technical and organisational measures to ensure information security
- Regione Lombardia: Non-compliance with general data processing principles
- Frigorifica Botana S.L.: Non-compliance with general data processing principles
- Rhodes Municipal Transport Company: Insufficient fulfilment of data subjects rights
- NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε.: Non-compliance with general data processing principles
- CEDICO, CENTRO DE DIAGNÓSTICO POR LA IMÁGEN, S.L.: Non-compliance with general data processing principles
- Ferde AS: Non-compliance with general data processing principles
- Bar owner: Non-compliance with general data processing principles
- AMPUDIA DIAZ, S.L.: Non-compliance with general data processing principles
- Store owner: Non-compliance with general data processing principles
- CLUB DEPORTIVO SANSUEÑA, S.L.: Insufficient legal basis for data processing
- Insurance company: Insufficient technical and organisational measures to ensure information security
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- Bank: Insufficient technical and organisational measures to ensure information security
- Ciechi Ardizzone Gioeni di Catania: Non-compliance with general data processing principles
- Facebook Ireland Limited: Insufficient fulfilment of information obligations
- Bocconi University: Non-compliance with general data processing principles
- Sky Italia S.r.l.: Insufficient legal basis for data processing
- Østre Toten municipality: Insufficient technical and organisational measures to ensure information security
- Glove Technology SRL: Insufficient legal basis for data processing
- HIV Scotland: Insufficient technical and organisational measures to ensure information security
- S.P.E.E.H. Hidroelectrica S.A.: Insufficient technical and organisational measures to ensure information security
- Comune di Montalbano Jonico: Non-compliance with general data processing principles
- MOVE Ireland: Insufficient technical and organisational measures to ensure information security
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Private Individual: Non-compliance with general data processing principles
- Bank: Non-compliance with general data processing principles
- WS WiSpear Systems Ltd: Non-compliance with general data processing principles
- Régie autonome des transports parisiens: Non-compliance with general data processing principles
- Neighborhood community: Non-compliance with general data processing principles
- DAVISER SERVICIOS, S.L.: Non-compliance with general data processing principles
- Cabinet Office: Insufficient technical and organisational measures to ensure information security
- Physician: Insufficient legal basis for data processing
- Dutch Minister of Finance: Insufficient legal basis for data processing
- Norwegian State Pension Fund (SPK): Insufficient legal basis for data processing
- Psykoterapiakeskus Vastaamo: Non-compliance with general data processing principles
- Car importer: Insufficient legal basis for data processing
- IZA OBRAS Y PROMOCIONES, S.A.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- LA OFICINA BAR: Non-compliance with general data processing principles
- Ica s.r.l.: Insufficient technical and organisational measures to ensure information security
- Telekom Romania Communications SA: Non-compliance with general data processing principles
- Property Owner Community: Non-compliance with general data processing principles
- Warsaw University of Technology: Insufficient technical and organisational measures to ensure information security
- Irish Teacher Council: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Società Med Store Saronno s.r.l.: Insufficient technical and organisational measures to ensure information security
- Casa di cura Fondazione Gaetano e Piera Borghi s.r.l.: Insufficient technical and organisational measures to ensure information security
- Società H San Raffaele Resnati s.r.l.: Non-compliance with general data processing principles
- Lisbon City Council: Insufficient legal basis for data processing
- C-Planet (IT Solutions) Limited: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- PHARMA TALENTS, S.L.U.: Insufficient technical and organisational measures to ensure information security
- Enel Energia S.p.A: Insufficient legal basis for data processing
- Property Owner Community: Non-compliance with general data processing principles
- Azienda USL di Parma: Non-compliance with general data processing principles
- Travel agency: Insufficient technical and organisational measures to ensure information security
- Motor insurance center: Non-compliance with general data processing principles
- Uppsala hospital board: Insufficient technical and organisational measures to ensure information security
- Corradi s.r.l.: Non-compliance with general data processing principles
- Lawyer: Insufficient legal basis for data processing
- INCOPROSOL, S.L.: Non-compliance with general data processing principles
- Researcher: Non-compliance with general data processing principles
- EU DisinfoLab: Non-compliance with general data processing principles
- Cosmote Mobile Telecommunications S.A.: Insufficient technical and organisational measures to ensure information security
- B&T S.p.A.: Insufficient legal basis for data processing
- Aimon Srl: Insufficient legal basis for data processing
- Restaurant: Non-compliance with general data processing principles
- Employee at a Covid 19 testing center: Non-compliance with general data processing principles
- Restaurant: Non-compliance with general data processing principles
- Operator of a ballet school: Insufficient legal basis for data processing
- Restaurant: Non-compliance with general data processing principles
- IAB Europe: Insufficient legal basis for data processing
- Private person: Non-compliance with general data processing principles
- ASL Latina: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- ORANGE ESPAÑA VIRTUAL, S.L.: Non-compliance with general data processing principles
- Orange Espagne S.A.U.: Non-compliance with general data processing principles
- XFERA MÓVILES, S.A.: Non-compliance with general data processing principles
- TELEFÓNICA MÓVILES ESPAÑA, S.A.U.: Non-compliance with general data processing principles
- Cafe operator: Non-compliance with general data processing principles
- PINTODIS, S.L.: Non-compliance with general data processing principles
- Ubi Banca spa: Non-compliance with general data processing principles
- Azienda Sanitaria Locale Frosinone: Insufficient fulfilment of information obligations
- Università Telematica Internazionale Uninettuno: Non-compliance with general data processing principles
- Azienda sanitaria unica regionale Marche: Insufficient technical and organisational measures to ensure information security
- Private club 'Ruian': Non-compliance with general data processing principles
- Private person: Non-compliance with general data processing principles
- Civil law firm 'Sabou, Burz & Cuc': Insufficient legal basis for data processing
- Hotel operator: Non-compliance with general data processing principles
- Medical clinic: Insufficient fulfilment of information obligations
- WORLDWIDE CLASSIC CARS NETWORK S.L.: Non-compliance with general data processing principles
- Costampress S.p.A.: Insufficient legal basis for data processing
- Hörpu tónlistar- og ráðstefnuhúss ohf.: Non-compliance with general data processing principles
- Clearview Al Inc.: Non-compliance with general data processing principles
- Azienda socio sanitaria territoriale Melegnano e della Martesana: Insufficient legal basis for data processing
- Comune di Guidizzolo: Insufficient legal basis for data processing
- BREBAU GmbH: Insufficient legal basis for data processing
- Fortum Marketing and Sales Polska S.A.: Insufficient technical and organisational measures to ensure information security
- Employer: Insufficient fulfilment of data subjects rights
- Klarna Bank AB: Insufficient fulfilment of information obligations
- Foreign language school: Insufficient fulfilment of data subjects rights
- Brussels Airport Zaventem: Insufficient legal basis for data processing
- Brussels Airport Charleroi: Insufficient legal basis for data processing
- Company: Insufficient fulfilment of data subjects rights
- Dutch Tax and Customs Administration: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Azienda USL Toscana Centro: Insufficient technical and organisational measures to ensure information security
- Piraeus Bank: Non-compliance with general data processing principles
- Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo: Insufficient legal basis for data processing
- Mayor: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- LABORATORIOS GONZÁLEZ, S.L.: Non-compliance with general data processing principles
- CAFFE VECCHIO, S.L.: Insufficient legal basis for data processing
- Brav s.r.l.: Insufficient technical and organisational measures to ensure information security
- Nationale Maatschappij der Belgische Spoorwegen: Insufficient legal basis for data processing
- ASST di Lodi: Insufficient technical and organisational measures to ensure information security
- Azienda ospedaliera di Perugia: Non-compliance with general data processing principles
- Bar owner: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Café owner: Non-compliance with general data processing principles
- Workshop: Non-compliance with general data processing principles
- MAYR MELNHOF PACKAGING ROMANIA S.R.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Palumbo Superyacht Ancona s.r.l.: Insufficient legal basis for data processing
- Findomestic Banca spa: Non-compliance with general data processing principles
- Tuckers Solicitors LLP: Non-compliance with general data processing principles
- Clearview Al Inc.: Non-compliance with general data processing principles
- Roularta Media Group: Insufficient legal basis for data processing
- Educationest s.r.l.: Insufficient legal basis for data processing
- CORON ISLAND SLU: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Italian Ministry of Defense: Insufficient legal basis for data processing
- Istituto Nazionale Assicurazione Infortuni sul Lavoro: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- LODEJU, S.L.: Non-compliance with general data processing principles
- Restaurant: Non-compliance with general data processing principles
- Comune di Partanna: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Ekss s.r.l.: Insufficient fulfilment of information obligations
- Nos s.r.l.s.: Insufficient legal basis for data processing
- Ospedale San Raffaele s.r.l.: Non-compliance with general data processing principles
- SCOTCH CORNER BAR: Non-compliance with general data processing principles
- Asociația de Proprietari Aviației Park: Insufficient legal basis for data processing
- Gyldendal A/S: Non-compliance with general data processing principles
- Zito Auto di Gianfranco Zito: Non-compliance with general data processing principles
- Stołeczny Ośrodek dla Osób Nietrzeźwych: Insufficient legal basis for data processing
- Budapest Bank Zrt.: Insufficient legal basis for data processing
- CORPORACIÓN DE RADIO Y TELEVISIÓN ESPAÑOLA S.A.: Non-compliance with general data processing principles
- RADIO TELEVISION MADRID, S.A.: Non-compliance with general data processing principles
- Tavistock & Portman NHS Foundation Trust: Insufficient technical and organisational measures to ensure information security
- Private Individual: Non-compliance with general data processing principles
- Otavamedia Oy: Insufficient fulfilment of data subjects rights
- Azienda Sanitaria Locale Roma: Insufficient legal basis for data processing
- Intesa Sanpaolo S.p.A: Insufficient legal basis for data processing
- Norwegian Parliament: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- ASOCIACIÓN DE AFICIONADOS Y PEQUEÑOS ACCIONISTAS UNIDAD HERCULANA: Non-compliance with general data processing principles
- Clearview Al Inc.: Non-compliance with general data processing principles
- Private Individual: Non-compliance with general data processing principles
- Azienda Socio Sanitaria Territoriale Dei Sette Laghi: Insufficient technical and organisational measures to ensure information security
- City of Rome (Roma capitale): Insufficient legal basis for data processing
- DKV Seguros y Reaseguros, S.A.E.: Insufficient technical and organisational measures to ensure information security
- Bar owner: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Bookstore employee: Insufficient technical and organisational measures to ensure information security
- BANKINTER, S.A.: Non-compliance with general data processing principles
- Afragola municipality: Non-compliance with general data processing principles
- Villabate municipality: Non-compliance with general data processing principles
- Convitto Nazionale Statale 'Giordano Bruno' di Maddaloni (boarding school): Insufficient legal basis for data processing
- Region of Tuscany: Insufficient legal basis for data processing
- Singh Market: Insufficient fulfilment of information obligations
- Azienda sanitaria universitaria Friuli Centrale: Insufficient technical and organisational measures to ensure information security
- Azienda sanitaria universitaria Friuli Occidentale: Insufficient technical and organisational measures to ensure information security
- Comune di Napoli Corpo di Polizia Municipale: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Company: Insufficient fulfilment of information obligations
- Company: Insufficient fulfilment of information obligations
- Private Person: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- EFS MANTENIMIENTO Y SERVICIOS TÉCNICOS, S.L.: Non-compliance with general data processing principles
- Territorial Administration of the Government of Genoa: Insufficient legal basis for data processing
- UBEEQO INTERNATIONAL: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- JAÉN SENTIDO Y COMÚN: Insufficient technical and organisational measures to ensure information security
- ESTUDIOS EUROPEOS DE POSTGRADO Y EMPRESA, S.L.: Insufficient technical and organisational measures to ensure information security
- Policoro municipality: Non-compliance with general data processing principles
- Synlab Med srl: Non-compliance with general data processing principles
- Restaurant owner: Non-compliance with general data processing principles
- Wabag Water Services SRL: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Electronics store: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Manx Care Ltd: Non-compliance with general data processing principles
- Farpa s.r.l.: Non-compliance with general data processing principles
- Santa Ninfa municipality: Insufficient legal basis for data processing
- FREE SUN ENERGY S.L.: Insufficient technical and organisational measures to ensure information security
- JOYPAZAR, S.A.: Non-compliance with general data processing principles
- SLOVAKIA DPA: Non-compliance with general data processing principles
- Private Polyclinic and Diagnostic Centre of Pyle Axiou: Non-compliance with general data processing principles
- DO VALUE GREECE LOANS & CREDITS CLAIM MANAGEMENT S.A.: Insufficient fulfilment of data subjects rights
- UNONO NET 3.0, S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- SMART ELECTRIC SOLUTIONS, S.L.: Non-compliance with general data processing principles
- Cribis Credit Management s.r.l.: Insufficient legal basis for data processing
- Sindicato Intersectorial Trabajadores/as Provincia de Alicante: Non-compliance with general data processing principles
- Meta Platforms, Inc.: Non-compliance with general data processing principles
- SERVICIOS PROFESIONALES LA PARADA S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- GIE INFOGREFFE: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- SC Raiffeisen Bank SA: Non-compliance with general data processing principles
- EURO DONER KEBAB: Non-compliance with general data processing principles
- Store owner: Non-compliance with general data processing principles
- Federazione Italiana Sommelier, Albergatori e Ristoratori: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- NATURGY ENERGY GROUP, S.A.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Health insurance provider: Non-compliance with general data processing principles
- CLUB NATACIO LLEIDA: Non-compliance with general data processing principles
- Auto Hi-Fi System S.n.c: Non-compliance with general data processing principles
- Global Service s.r.l.: Insufficient fulfilment of information obligations
- Azienda Socio Sanitaria Territoriale Rhodense: Insufficient technical and organisational measures to ensure information security
- BAYARD REVISTAS, S.A.: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Danish Immigration Agency: Insufficient technical and organisational measures to ensure information security
- Club Náutico el Estacio: Insufficient technical and organisational measures to ensure information security
- Easylife Ltd.: Insufficient legal basis for data processing
- Lazio Region: Non-compliance with general data processing principles
- Senseonics Inc.: Non-compliance with general data processing principles
- PUNTO BADAL-BCN S.L.: Insufficient technical and organisational measures to ensure information security
- Private individual: Insufficient technical and organisational measures to ensure information security
- EVERIS SPAIN S.L: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Website operator: Non-compliance with general data processing principles
- Medical laboratory: Insufficient technical and organisational measures to ensure information security
- IDIKA SA: Non-compliance with general data processing principles
- Physician: Insufficient fulfilment of data subjects rights
- Intesa Sanpaolo Vita S.p.a.: Non-compliance with general data processing principles
- RESTEXPERIENCE, S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Immobiliare Riscostruzione Meloria s.r.l.: Insufficient fulfilment of information obligations
- School: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Interserve Group Limited: Insufficient technical and organisational measures to ensure information security
- Servizio Idrico Integrato S.c.p.a.: Insufficient technical and organisational measures to ensure information security
- Clio S.r.l.: Insufficient legal basis for data processing
- Ginosa municipality: Insufficient legal basis for data processing
- Acqua Novara.VCO S.p.a.: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Thiene municipality: Insufficient legal basis for data processing
- OES GLOBAL ENERGY S.L.: Non-compliance with general data processing principles
- EL RACO DEL PIS INVERSIONES S.L.: Non-compliance with general data processing principles
- URBANO DIVERTIA, S.L.: Non-compliance with general data processing principles
- BANCO BILBAO VIZCAYA ARGENTARIA, S.A.: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- SC Prestige Media PHG SRL: Insufficient legal basis for data processing
- TECHPUMP SOLUTIONS S.L.: Non-compliance with general data processing principles
- UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Banco Bilbao Vizcaya Argentaria S.L.: Non-compliance with general data processing principles
- BANKINTER, S.A.: Non-compliance with general data processing principles
- AMPLIFON Hungary Trade and Service Provider LLC: Non-compliance with general data processing principles
- Mayor: Insufficient technical and organisational measures to ensure information security
- DISCORD INC.: Non-compliance with general data processing principles
- Setúbal municipality: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Vodafone Italia S.p.A.: Non-compliance with general data processing principles
- INDECEMI, S.L.: Non-compliance with general data processing principles
- LORENT 2013, S.L: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Alpha Exploration: Non-compliance with general data processing principles
- Azienda Usl Valle d'Aosta: Insufficient technical and organisational measures to ensure information security
- CASA 7 PERSONAL SHOPPER, S.L.: Non-compliance with general data processing principles
- Association for the prevention and study of crimes, abuses and negligence in information technology and advanced communications (APEDANICA): Non-compliance with general data processing principles
- Slane Credit Union Ltd.: Insufficient technical and organisational measures to ensure information security
- Portuguese National Statistical Institute: Non-compliance with general data processing principles
- Viking Line Oy Abp: Non-compliance with general data processing principles
- I.S.P.R.O.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Property owner administrative board: Non-compliance with general data processing principles
- Lazio Region: Insufficient legal basis for data processing
- Villafranca di Verona municipality: Non-compliance with general data processing principles
- Areti spa: Non-compliance with general data processing principles
- Sportitalia: Non-compliance with general data processing principles
- Meta Platforms Ireland Limited: Non-compliance with general data processing principles
- Homeowners Association: Non-compliance with general data processing principles
- Transport Workers' Union of Aragon: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Praktiškas UAB: Insufficient legal basis for data processing
- VIEC Limited: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- TECNO MOTOR LA MUELA, S.L.L: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Azienda Universitaria Friuli Occidentale: Insufficient legal basis for data processing
- Azienda Universitaria Friuli Centrale: Insufficient legal basis for data processing
- Azienda Universitaria Giuliano Isontina: Insufficient legal basis for data processing
- STS Di Prisinzano s.r.l: Insufficient fulfilment of information obligations
- Fondazione Teatro Regio di Torino: Insufficient legal basis for data processing
- Azienda Ospedaliero-Universitaria Careggi di Firenze: Insufficient technical and organisational measures to ensure information security
- Bank of Cyprus Public Company Ltd.: Insufficient technical and organisational measures to ensure information security
- Cyprus Electricity Authority: Insufficient technical and organisational measures to ensure information security
- MIRACLE IBIZA S.L.: Non-compliance with general data processing principles
- Istituto di Istruzione Superiore G. Renda di Polistena, Reggio Calabria: Insufficient legal basis for data processing
- Italian Archery Federation (FITARCO): Insufficient legal basis for data processing
- PIONIER (law firm): Insufficient legal basis for data processing
- Comune di Borgia: Insufficient legal basis for data processing
- Comune di Vicchio: Insufficient legal basis for data processing
- Store owner: Insufficient fulfilment of information obligations
- Comune di Salento: Non-compliance with general data processing principles
- Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari: Insufficient legal basis for data processing
- Comune di Monte Sant'Angelo: Insufficient legal basis for data processing
- Rebirth s.r.l.: Insufficient fulfilment of information obligations
- Manager of a real estate co-ownership: Insufficient legal basis for data processing
- Tecnomed Trento s.r.l.: Non-compliance with general data processing principles
- Pharmacy: Non-compliance with general data processing principles
- Douglas Italia S.p.a.: Non-compliance with general data processing principles
- Company: Insufficient technical and organisational measures to ensure information security
- Sats ASA: Insufficient fulfilment of data subjects rights
- Company: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Centric Health Ltd.: Non-compliance with general data processing principles
- Verizon Connect Italy S.p.A.: Insufficient legal basis for data processing
- Edison Energia S.p.A.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Alianța pentru Unirea Românilor: Non-compliance with general data processing principles
- Szczecin-Centrum District Court: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Attorney: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Azienda ULSS n.5 Polesana: Insufficient technical and organisational measures to ensure information security
- Bank of Ireland 365: Insufficient technical and organisational measures to ensure information security
- CITYSCOOT: Non-compliance with general data processing principles
- Tehnoplus Industry SRL: Non-compliance with general data processing principles
- Private individual: Insufficient legal basis for data processing
- SOCIEDAD ESPAÑOLA DE RADIODIFUSIÓN, S.L.: Non-compliance with general data processing principles
- LA VANGUARDIA EDICIONES, S.L.: Non-compliance with general data processing principles
- DIARIO ABC, S.L.: Non-compliance with general data processing principles
- CONECTA5 TELECINCO, S.A.U.: Non-compliance with general data processing principles
- DISPLAY CONNECTORS, S.L.: Non-compliance with general data processing principles
- EL DIARIO DE PRENSA DIGITAL SL.: Non-compliance with general data processing principles
- EDITORIAL DE PRENSA CANARIA, S.A.: Non-compliance with general data processing principles
- TITANIA COMPAÑÍA EDITORIAL, S.L.: Non-compliance with general data processing principles
- UNIDAD EDITORIAL INFORMACION GENERAL S.L.U.: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- TikTok: Non-compliance with general data processing principles
- Housing association: Insufficient fulfilment of data breach notification obligations
- ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.: Non-compliance with general data processing principles
- 20 MINUTOS EDITORA, S.L.: Non-compliance with general data processing principles
- REGENCY COMPANY SRL: Non-compliance with general data processing principles
- TV2 Média Csoport Zrt.: Non-compliance with general data processing principles
- Azienda Ospedale-Università Padova: Non-compliance with general data processing principles
- Store owner: Insufficient fulfilment of information obligations
- Vodafone: Non-compliance with general data processing principles
- Piraeus Bank: Non-compliance with general data processing principles
- ORANGE ESPAGNE S.A.U.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Partidul Uniunea Salvați România: Insufficient legal basis for data processing
- Covid-19 test center: Non-compliance with general data processing principles
- Azienda sanitaria locale di Bari: Non-compliance with general data processing principles
- Operator of a public toilet: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Ediscom S.p.a.: Non-compliance with general data processing principles
- Burwebs S.L.: Non-compliance with general data processing principles
- DISPLAY CONNECTORS, S.L.: Non-compliance with general data processing principles
- BANQUETES SANTA ANA, S.L.: Non-compliance with general data processing principles
- Aesse S.r.l.s.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Company: Insufficient technical and organisational measures to ensure information security
- Homeowners' association: Non-compliance with general data processing principles
- Hotel: Insufficient legal basis for data processing
- Physician: Insufficient fulfilment of data subjects rights
- Website operator: Insufficient fulfilment of data subjects rights
- Coin dealer: Non-compliance with general data processing principles
- Πολίτης newspaper: Non-compliance with general data processing principles
- NAGA Markets Europe Ltd: Insufficient technical and organisational measures to ensure information security
- ASSOCIACIO DE CAÇADORS D'ALZIRA: Non-compliance with general data processing principles
- Consorzio Concessioni Reti Gas S.c.a.r.l.: Non-compliance with general data processing principles
- I&S Limited Kft: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Bolzano municipality: Insufficient technical and organisational measures to ensure information security
- Informatica Alto Adige Spa: Insufficient technical and organisational measures to ensure information security
- Razmataz Live s.r.l..: Non-compliance with general data processing principles
- MALTA DPA: Insufficient technical and organisational measures to ensure information security
- MALTA DPA: Insufficient technical and organisational measures to ensure information security
- Compania Națională Poșta Română S.A.: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Deutsche Kreditbank: Insufficient fulfilment of data subjects rights
- Private individual: Non-compliance with general data processing principles
- PELAYO, MUTUA DE SEGUROS Y REASEGUROS A PRIMA FIJA: Non-compliance with general data processing principles
- H&M Hennes & Mauritz s.r.l. EUR 50,000: Non-compliance with general data processing principles
- UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- KG COM: Non-compliance with general data processing principles
- BRD-Groupe Société Générale S.A.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Belgian Order of Pharmacists: Non-compliance with general data processing principles
- Municipality: Insufficient technical and organisational measures to ensure information security
- MALTA DPA: Non-compliance with general data processing principles
- MALTA DPA: Insufficient fulfilment of data subjects rights
- MALTA DPA: Non-compliance with general data processing principles
- Roma Capitale: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Corporación de Medios de Extremadura: Non-compliance with general data processing principles
- Sociedad Vascongada de Publicaciones, S.A.: Non-compliance with general data processing principles
- Piraeus Bank: Non-compliance with general data processing principles
- La Risorsa Umana.it s.r.l.: Non-compliance with general data processing principles
- Municipality: Insufficient technical and organisational measures to ensure information security
- Store owner: Insufficient fulfilment of information obligations
- Benetton Group S.r.l.: Non-compliance with general data processing principles
- Grizzaffi Management Srl: Insufficient fulfilment of data subjects rights
- Sjúkratyringur Íslands: Insufficient technical and organisational measures to ensure information security
- Website operator: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- EXPLOTACIONES HOSTELERAS Y DE OCIO ALBACETEÑAS, S.L.: Non-compliance with general data processing principles
- Heilsuveru: Insufficient technical and organisational measures to ensure information security
- RCL CRUISES LTD: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- LISMARTSA, S.L.: Non-compliance with general data processing principles
- Almennri innheimtu ehf: Insufficient legal basis for data processing
- eCommerce 2020 ApS: Insufficient legal basis for data processing
- Università degli studi di Cassino e del Lazio Meridionale: Non-compliance with general data processing principles
- Creditinfo Lánstraust hf.: Insufficient legal basis for data processing
- LISMARTSA, S.L.: Non-compliance with general data processing principles
- CBHNOS S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Company: Insufficient technical and organisational measures to ensure information security
- Irish Departement of Health: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- La Gazzetta di Parma S.r.l.: Non-compliance with general data processing principles
- Citynews S.p.A.: Non-compliance with general data processing principles
- Comune di Napoli: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Thin Srl: Non-compliance with general data processing principles
- Ew Business Machines S.p.A.: Non-compliance with general data processing principles
- ODRIA COSTAS INTERNACIONAL, S.L.: Non-compliance with general data processing principles
- GYMOOGIMNASIOS S.L.: Non-compliance with general data processing principles
- Azienda Usl Toscana Sud Est.: Non-compliance with general data processing principles
- MÁRMOLES Y GRANITOS MEJIAS, S. L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Homeowners' association: Non-compliance with general data processing principles
- Ermeslink di Giovanni Di Stefano: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- ALBEN AIRPORT FACILITIES S.L.: Non-compliance with general data processing principles
- WALL BOX CHARGERS S.L.: Non-compliance with general data processing principles
- Trygg-Hansa: Non-compliance with general data processing principles
- Rinascente S.p.A.: Non-compliance with general data processing principles
- Autostrade per l'Italia spa: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- University of Iceland: Insufficient fulfilment of information obligations
- TikTok Limited: Non-compliance with general data processing principles
- AcegasApsAmga SpA: Insufficient fulfilment of data subjects rights
- Private individual: Non-compliance with general data processing principles
- Digi Telecommunications and Services Ltd.: Insufficient technical and organisational measures to ensure information security
- Private individual: Non-compliance with general data processing principles
- EUROPA PRESS DE CATALUNYA, S.A.: Non-compliance with general data processing principles
- SAF LOGISTICS: Non-compliance with general data processing principles
- RCS Mediagroup Spa: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Breikot Management Ltd: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Azienda Socio Sanitaria Territoriale Ovest Milanese: Non-compliance with general data processing principles
- ILUNION SEGURIDAD, S.A.: Non-compliance with general data processing principles
- NORDETIA CLINICS MÓSTOLES S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Cypriot Ministry of the Interior: Non-compliance with general data processing principles
- Schockholm School borard: Non-compliance with general data processing principles
- GFB One s.r.l.: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- San Severo municipality: Insufficient legal basis for data processing
- Axpo Italia Spa: Non-compliance with general data processing principles
- BILBAO AD INFINITUM, S.L.: Non-compliance with general data processing principles
- Asl Napoli 3 Sud: Insufficient technical and organisational measures to ensure information security
- Company: Insufficient technical and organisational measures to ensure information security
- Mednow Medical Center di Giugni Marco: Non-compliance with general data processing principles
- Università Telematica E-Campus: Non-compliance with general data processing principles
- SC Spark Car Sharing SRL: Non-compliance with general data processing principles
- UNIQUE HOTEL APARTMENT S.L.: Non-compliance with general data processing principles
- Hotel: Non-compliance with general data processing principles
- Physician: Non-compliance with general data processing principles
- THE BEE LOGISTICS, S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- CHATWITH.IO WORLDWIDE, S.L.: Non-compliance with general data processing principles
- APOLLONIA TOPCO, S.L.: Non-compliance with general data processing principles
- Salvator Mundi International Hospital s.r.l: Non-compliance with general data processing principles
- Azienda Usl Toscana centro: Non-compliance with general data processing principles
- Ministero dell'Ambiente e della Sicurezza Energetica: Non-compliance with general data processing principles
- Scionti Selezioni Superiori S.r.l.: Non-compliance with general data processing principles
- Nimbus s.r.l.: Non-compliance with general data processing principles
- Compara Facile S.r.l.: Non-compliance with general data processing principles
- Tiscali Italia SpA: Non-compliance with general data processing principles
- GREECE DPA: Non-compliance with general data processing principles
- Athens Urban Transport Organization: Non-compliance with general data processing principles
- Robin Srl: Non-compliance with general data processing principles
- FORO ASTURIAS: Non-compliance with general data processing principles
- LUXEMBOURG DPA: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Pharmacy owner: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Phyisician: Non-compliance with general data processing principles
- Voorschoten municipality: Non-compliance with general data processing principles
- Eurocollege Oxford English Institute S.L.: Non-compliance with general data processing principles
- Norwegian Labor and Welfare Administration: Insufficient technical and organisational measures to ensure information security
- Reykjanesbær municipality: Non-compliance with general data processing principles
- City of Reykjavik: Non-compliance with general data processing principles
- Garðabær municipality: Non-compliance with general data processing principles
- City of Hafnarfjörður: Non-compliance with general data processing principles
- Azienda socio sanitaria territoriale di Lodi CF: Non-compliance with general data processing principles
- Piraeus Leasing S.M.S.A.: Non-compliance with general data processing principles
- City of Kópavogur: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Store owner: Non-compliance with general data processing principles
- Homeowners' association: Non-compliance with general data processing principles
- Homeowners' association: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Homeowner administrator: Insufficient legal basis for data processing
- Comune di Lonato del Garda: Insufficient legal basis for data processing
- Comune di Castel Goffredo: Insufficient legal basis for data processing
- RCS Mediagroup S.p.a.: Non-compliance with general data processing principles
- Disciplinary officer: Insufficient technical and organisational measures to ensure information security
- UNIPREX, S.A.: Non-compliance with general data processing principles
- Alior Bank SA: Non-compliance with general data processing principles
- Sirio S.p.A.: Insufficient legal basis for data processing
- Azienda socio sanitaria territoriale nord Milano, C.F.: Non-compliance with general data processing principles
- AMAZON FRANCE LOGISTIQUE: Non-compliance with general data processing principles
- TITAN STRONG, S.L.: Non-compliance with general data processing principles
- SOLAR PROGRESS, S.L.: Non-compliance with general data processing principles
- Company: Insufficient fulfilment of data subjects rights
- Private individual: Non-compliance with general data processing principles
- Owners' association: Non-compliance with general data processing principles
- Account Exchange SRL: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- CAIXABANK, S.A.: Non-compliance with general data processing principles
- Oney Servicios Financieros E.F.C.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- ENDESA ENERGÍA, S.A.U.: Non-compliance with general data processing principles
- UniCredit S.p.a.: Insufficient technical and organisational measures to ensure information security
- Istituto Comprensivo Statale “F.S. Cabrini: Insufficient legal basis for data processing
- Pizza delivery service: Non-compliance with general data processing principles
- Verkkokauppa.com: Non-compliance with general data processing principles
- Medtronic Italia: Non-compliance with general data processing principles
- Physician: Non-compliance with general data processing principles
- Bank of Cyprus Public Company Ltd.: Non-compliance with general data processing principles
- BANCO BILBAO VIZCAYA ARGENTARIA, S.A: Non-compliance with general data processing principles
- Stjörnuna ehf: Non-compliance with general data processing principles
- Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.: Non-compliance with general data processing principles
- CENTRO MÉDICO SALUS BALEARES, S.L.: Non-compliance with general data processing principles
- Municipality of Modica: Non-compliance with general data processing principles
- Camera di Commercio Industria Artigianato e Agricoltura: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- BULGARIA DPA: Non-compliance with general data processing principles
- INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P.: Non-compliance with general data processing principles
- SINDICATO LIBRE DE TRANSPORTES: Insufficient technical and organisational measures to ensure information security
- Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ): Insufficient technical and organisational measures to ensure information security
- PRESTAMER, S.L.: Insufficient technical and organisational measures to ensure information security
- VODAFONE ESPAÑA, S.A.U.: Non-compliance with general data processing principles
- AIO E-COMMERCE, S.L.: Non-compliance with general data processing principles
- Ophthalmologic institute: Non-compliance with general data processing principles
- Betting company: Insufficient legal basis for data processing
- Enel Energia SpA: Insufficient technical and organisational measures to ensure information security
- Mas s.r.l.: Non-compliance with general data processing principles
- Mas s.r.l.s.: Non-compliance with general data processing principles
- Physician: Insufficient technical and organisational measures to ensure information security
- Central Young Men’s Christian Association: Insufficient technical and organisational measures to ensure information security
- Homeowners' association: Non-compliance with general data processing principles
- Homeowners' association: Non-compliance with general data processing principles
- Centro Riparazioni Piacentino S.p.A.: Non-compliance with general data processing principles
- Restaurant owner: Non-compliance with general data processing principles
- Innova Camara: Insufficient technical and organisational measures to ensure information security
- 4FINANCE SPAIN FINANCIAL SERVICES, S.A.U.: Insufficient technical and organisational measures to ensure information security
- Facile.Energy S.r.l.: Non-compliance with general data processing principles
- Olimpia S.r.l.: Non-compliance with general data processing principles
- HIPERBAZAR YONGFA 2018 SL: Insufficient technical and organisational measures to ensure information security
- Company: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Corint Logistic SRL.: Insufficient fulfilment of data subjects rights
- PILLOW HOTELS, S.L.: Non-compliance with general data processing principles
- President of a workers' council: Non-compliance with general data processing principles
- EUROBOX S.A.: Non-compliance with general data processing principles
- Medical association: Insufficient legal basis for data processing
- Dly S.r.l.: Non-compliance with general data processing principles
- I.N.P.A.S.: Insufficient legal basis for data processing
- Private individual: Non-compliance with general data processing principles
- Committee: Insufficient technical and organisational measures to ensure information security
- Azienda ospedale università di Padova: Non-compliance with general data processing principles
- CUI ZSQ FOOD, S.L.: Non-compliance with general data processing principles
- Avanza Bank AB: Insufficient technical and organisational measures to ensure information security
- ALLIANZ COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.: Insufficient technical and organisational measures to ensure information security
- BANCO BILBAO VIZCAYA ARGENTARIA, S.A.: Non-compliance with general data processing principles
- Cappello Giovanni & Figli s.r.l.: Non-compliance with general data processing principles
- Eni Plenitude S.p.A.: Non-compliance with general data processing principles
- Homeowners' association: Non-compliance with general data processing principles
- Website operator: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- 20 AÑOS DE MÚSICA A.I.E.: Non-compliance with general data processing principles
- DQG NORTE A.I.E: Non-compliance with general data processing principles
- Professional association: Non-compliance with general data processing principles
- VOX ESPAÑA: Non-compliance with general data processing principles
- Comune di Ustica: Non-compliance with general data processing principles
- Vinted: Insufficient fulfilment of data subjects rights
- A.S. Watson Health & Beauty Continental Europe B.V.: Insufficient legal basis for data processing
- Azienda Socio-sanitaria Territoriale Rhodense: Insufficient fulfilment of data subjects rights
- CAIXABANK S.A.: Non-compliance with general data processing principles
- Azienda Sanitaria Locale TO4: Non-compliance with general data processing principles
- Municipality of Nepi: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- EXPLOTACIONES HOSTELERAS Y DE OCIO ALBACETEÑAS, S.L.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- AFIANZA ASESORES S.L.: Non-compliance with general data processing principles
- Company: Insufficient technical and organisational measures to ensure information security
- UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Clearview AI Inc.: Non-compliance with general data processing principles
- Private individual: Non-compliance with general data processing principles
- Meta Platforms Ireland Limited: Insufficient technical and organisational measures to ensure information security
- ASSOCIACIO CANNABICA DEL MARESME ACANNAM: Non-compliance with general data processing principles
- LinkedIn: Insufficient legal basis for data processing
- Profi Rom Food SRL: Insufficient legal basis for data processing
- Postel S.p.A: Insufficient technical and organisational measures to ensure information security
- Private individual: Insufficient legal basis for data processing
- Selectra S.p.A.: Non-compliance with general data processing principles
- Debt collection service provider: Insufficient legal basis for data processing
- POLAND DPA: Insufficient technical and organisational measures to ensure information security
- Hospital: Insufficient technical and organisational measures to ensure information security
- OpenAI OpCo LLC: Non-compliance with general data processing principles
- KAFFA KOFFEE ORGANISATION, S.L.: Non-compliance with general data processing principles
- Sambla Group Oy: Insufficient technical and organisational measures to ensure information security
- Netflix International B.V.: Insufficient fulfilment of information obligations
- TELEFÓNICA DE ESPAÑA SAU: Non-compliance with general data processing principles
- Coolblue B.V: Insufficient legal basis for data processing
- MINAS DE VALDECASTILLO, S.A..: Non-compliance with general data processing principles
- GENERALI ESPAÑA, SOCIEDAD ANONIMA DE SEGUROS Y REASEGUROS: Insufficient technical and organisational measures to ensure information security
- Real estate company: Non-compliance with general data processing principles
- Centrum Medyczne Ujastek Sp. z o.o.: Non-compliance with general data processing principles
- Hospital: Insufficient technical and organisational measures to ensure information security
- COYARE SLU: Non-compliance with general data processing principles
- Sky Italia S.r.l.: Insufficient legal basis for data processing
- Correo Inteligente Postal, S.L.: Insufficient technical and organisational measures to ensure information security
- Foodinho Srl: Non-compliance with general data processing principles
- THE PHONE HOUSE SPAIN, S.L.: Insufficient technical and organisational measures to ensure information security
- INTERURBANA DE AUTOBUSES, S.A.: Non-compliance with general data processing principles
- Hera Comm S.p.A.: Non-compliance with general data processing principles
- CAJA RURAL DEL SUR, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL DE ARAGÓN, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL DE EXTREMADURA S.C.C.: Non-compliance with general data processing principles
- Fastweb S.p.A.: Non-compliance with general data processing principles
- CEGEDIM SANTÉ: Non-compliance with general data processing principles
- ENERGYA VM GESTIÓN DE ENERGÍA, S.L.: Non-compliance with general data processing principles
- CAJA RURAL DE JAEN, BARCELONA Y MADRID, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL NTRA. SRA. DEL ROSARIO: Non-compliance with general data processing principles
- CAJA RURAL DE ALBACETE, CIUDAD REAL Y CUENCA, S.C.T: Non-compliance with general data processing principles
- CAJA RURAL DE SALAMANCA, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL DE GIJÓN, S.C.A.C.: Non-compliance with general data processing principles
- Police Service of Northern Ireland: Insufficient technical and organisational measures to ensure information security
- Ministry of Interior (Greece): Insufficient technical and organisational measures to ensure information security
- IBERDROLA, S.A.: Non-compliance with general data processing principles
- I-DE REDES ELÉCTRICAS INTELIGENTES, S.A.U.: Non-compliance with general data processing principles
- Member of the European Parliament: Insufficient legal basis for data processing
- CAIXABANK, S.A.: Insufficient technical and organisational measures to ensure information security
- DPP Law Ltd.: Insufficient technical and organisational measures to ensure information security
- SERVICIOS ESPECIALES, S.A.: Non-compliance with general data processing principles
- BEEDIGITAL AI, S.A.: Non-compliance with general data processing principles
- IBERMUTUA, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL NUM.274.: Non-compliance with general data processing principles
- CAJA RURAL DE ARAGÓN, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL NTRA. SRA. DEL ROSARIO: Non-compliance with general data processing principles
- CAJA RURAL NTRA MADRE DEL SOL S.C.A.C.: Non-compliance with general data processing principles
- CAJA RURAL DE ONDA, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL GRANADA, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL DE BAENA NTRA. SRA. DE GUADALUPE, S.C.C.A.: Non-compliance with general data processing principles
- CAJA RURAL CENTRAL, S.C.C.: Non-compliance with general data processing principles
- CAJA RURAL DE ASTURIAS, S.C.C.: Non-compliance with general data processing principles
- ORANGE BANK, S.A. SUCURSAL EN ESPAÑA: Insufficient technical and organisational measures to ensure information security
- Minister of Digital Affairs: Insufficient legal basis for data processing
- Employment Service under the Ministry of Social Security and Labor of the Republic of Lithuania: Insufficient technical and organisational measures to ensure information security
- Vilnius District Municipality Administration: Insufficient technical and organisational measures to ensure information security
- Primary Health Care in the Capital Area: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Luka Inc.: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Real Estate Agency: Insufficient cooperation with supervisory authority
- COSMOSPACE: Non-compliance with general data processing principles
- TELEMAQUE: Non-compliance with general data processing principles
- MAD COOL FESTIVAL S.L.: Insufficient technical and organisational measures to ensure information security
- FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA: Insufficient technical and organisational measures to ensure information security
- EDA TV CONSULTING, S.L.: Non-compliance with general data processing principles
- SPAIN DPA: Non-compliance with general data processing principles
- Owner of a Law Firm: Insufficient technical and organisational measures to ensure information security
- CALOGA: Non-compliance with general data processing principles
- Doctor´s Office: Insufficient legal basis for data processing
- Doctor´s Office: Insufficient legal basis for data processing
- Doctor´s Office: Insufficient technical and organisational measures to ensure information security
- Home Owner Association: Non-compliance with general data processing principles
- GALENICUM HEALTH, S.L.U.: Non-compliance with general data processing principles
- INDEPENDENTS DE VALLROMANES: Non-compliance with general data processing principles
- Yliopiston Apteekin: Non-compliance with general data processing principles
- Ordine degli psicologi della Lombardia: Insufficient technical and organisational measures to ensure information security
- Realmaps S.r.l.: Insufficient legal basis for data processing
- SCHOOL FITNESS HOLIDAY & FRANCHISING, S.L.: Insufficient legal basis for data processing
- GRUAS IGNACI, S.L.: Non-compliance with general data processing principles
- CENTROS COMERCIALES CARREFOUR, S.A.: Insufficient technical and organisational measures to ensure information security
- 23andMe, Inc.: Insufficient technical and organisational measures to ensure information security
- Departement of Social Security: Insufficient legal basis for data processing
- Acea Energia S.p.A.: Insufficient legal basis for data processing
- Network of Agencies and Companies: Non-compliance with general data processing principles
- G@S Telecomunicazioni di Losito Lucia: Insufficient legal basis for data processing
- l’Istituto Alberghiero Mediterraneo di Pulsano: Insufficient legal basis for data processing
- Encore Thermoengineering s.r.l.: Non-compliance with general data processing principles
- Interflora Italia S.p.A.: Insufficient legal basis for data processing
- Municipality of Roccaraso: Insufficient legal basis for data processing
- ULPIA TRAJANA ALAMEDA S.L.: Non-compliance with general data processing principles
- Regione Lombardia: Insufficient legal basis for data processing
- Istituto di Istruzione Superiore 'P. Galluppi' Tropea: Insufficient legal basis for data processing
- Immobiliare Valdalpone S.r.l.: Non-compliance with general data processing principles
- Eastern Parma Apennine Mountain Community: Non-compliance with general data processing principles
- Patronage and Assistance for Citizens and Agriculture Board: Insufficient legal basis for data processing
- Undici S.r.l.s.: Non-compliance with general data processing principles
- Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.: Non-compliance with general data processing principles
- Multiple Companies: Insufficient legal basis for data processing
- MA Immobiliare S.r.l.s.: Non-compliance with general data processing principles
- Autostrade per l’Italia S.p.A.: Insufficient legal basis for data processing
- City of Dublin Education and Training Board: Insufficient technical and organisational measures to ensure information security
- PPC Energie Muntenia SA: Insufficient legal basis for data processing
- Meedea Construct Prest SRL: Insufficient legal basis for data processing
- Banca Transilvania S.A.: Insufficient legal basis for data processing
- ROUMASPORT SRL: Insufficient legal basis for data processing
- Romoffice Construct Holding Ag SRL: Insufficient legal basis for data processing
- MP Dumitru Viorel Focșa: Insufficient legal basis for data processing
- SC Piramida Trade Invest SRL: Non-compliance with general data processing principles
- Alliance for the Union of Romanians Party: Non-compliance with general data processing principles
- Piraeus Bank S.A.: Insufficient legal basis for data processing
- PLATAFORMA CABANILLAS SA.: Non-compliance with general data processing principles
- ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.: Non-compliance with general data processing principles
- AIRE NETWORKS DEL MEDITERRÃNEO, S.L.: Insufficient technical and organisational measures to ensure information security
- REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L.: Insufficient technical and organisational measures to ensure information security
- ALVEA SOLUCIONES TECNOLÓGICAS, S.L.: Non-compliance with general data processing principles
- OCI CINE, S.L.: Insufficient technical and organisational measures to ensure information security
- COLEGIO VIRGEN DE EUROPA, S.L.: Insufficient legal basis for data processing
- IBERCAJA BANCO, S.A.: Non-compliance with general data processing principles
- CURENERGÍA COMERCIALIZADOR DE ÚLTIMO RECURSO S.A.U.: Non-compliance with general data processing principles
- Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North: Insufficient legal basis for data processing
- Menarini Silicon Biosystems SpA: Non-compliance with general data processing principles
- McDonald’s Polska Sp. z o.o.: Non-compliance with general data processing principles
- 24/7 Communication Sp. z o.o.: Insufficient technical and organisational measures to ensure information security
- VALORA PREVENCIÓN, S.L.U.: Insufficient technical and organisational measures to ensure information security
- SUNERIS, S.A.: Non-compliance with general data processing principles
- Company: Non-compliance with general data processing principles
- Non-Public Health Care Institution: Insufficient technical and organisational measures to ensure information security
- Birthlink: Insufficient technical and organisational measures to ensure information security
- Poste Vita S.p.a.: Insufficient technical and organisational measures to ensure information security
- Magna PT S.p.A.: Insufficient legal basis for data processing
- Covid 19 Test Lab: Insufficient technical and organisational measures to ensure information security
- Municipality of San Francesco al Campo: Non-compliance with general data processing principles
- Municipality of Bologna: Insufficient technical and organisational measures to ensure information security
- Zougla TZI-AP Anonymous Mass Media Company: Insufficient legal basis for data processing
- Sligo County Council: Non-compliance with general data processing principles
- Maynooth University: Insufficient technical and organisational measures to ensure information security
- Police Officer: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Self Employed Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Self Employed Person: Insufficient legal basis for data processing
- Housing Finance Corporation: Insufficient legal basis for data processing
- Company: Insufficient fulfilment of data subjects rights
- ING Bank Śląski: Insufficient legal basis for data processing
- ENDESA ENERGIA, S.A.U.: Non-compliance with general data processing principles
- TRUEBA SPORT S.L.: Insufficient technical and organisational measures to ensure information security
- GACM SEGUROS GENERALES, COMPAÑIA DE SEGUROS Y REASEGUROS S.A.U.: Non-compliance with general data processing principles
- REAL FEDERACIÓN ESPAÑOLA DE TENIS DE MESA: Insufficient legal basis for data processing
- REAL SOCIEDAD DE FUTBOL S.A.D.: Insufficient technical and organisational measures to ensure information security
- WORLD 2 MEET, S.L.: Non-compliance with general data processing principles
- BANCO INVERSIS, S.A.: Insufficient technical and organisational measures to ensure information security
- GRUPO BONATEL SL: Insufficient technical and organisational measures to ensure information security
- LEIVA BUS, S.L.: Insufficient technical and organisational measures to ensure information security
- YUNEXPRESS SPAIN, S.L.: Insufficient data processing agreement
- Order of Nursing Professions of Viterbo: Insufficient technical and organisational measures to ensure information security
- SATI S.p.A.: Non-compliance with general data processing principles
- Landlord: Insufficient legal basis for data processing
- Università degli Studi di Cassino e del Lazio Meridionale: Non-compliance with general data processing principles
- Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli: Insufficient legal basis for data processing
- Linea Stampalibera Società Cooperativa r.I.: Non-compliance with general data processing principles
- Comune di Venezia: Non-compliance with general data processing principles
- Nursery School “La Combricola Dei Birichini Di Betty”: Non-compliance with general data processing principles
- S-Pankki Oyj: Insufficient technical and organisational measures to ensure information security
- Chamber of Commerce, Industry, Services and Navigation of Spain: Insufficient legal basis for data processing
- Sociedad de Gestión de Activos Procedentes de la Reestructuración Bancaria S.A.: Insufficient technical and organisational measures to ensure information security
- SAMARITAINE SAS: Non-compliance with general data processing principles
- Vodafone – PANAFON A.E.E.T.: Insufficient technical and organisational measures to ensure information security
- Telecommunications Operator: Non-compliance with general data processing principles
- Telecommunications Operator: Non-compliance with general data processing principles
- Ospedaliero-Universitaria Careggi: Insufficient technical and organisational measures to ensure information security
- Casa di Cura Città di Roma: Insufficient technical and organisational measures to ensure information security
- SERVACE S.L.: Non-compliance with general data processing principles
- CAPITA PLC: Insufficient technical and organisational measures to ensure information security
- Migliarino San Rossore Massaciuccoli Regional Park Authority: Insufficient legal basis for data processing
- Municipality of Buccino: Insufficient legal basis for data processing
- Experian Nederland B.V.: Insufficient legal basis for data processing
- IKEA: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Comune di Nichelino: Insufficient legal basis for data processing
- Giada FM S.r.l.: Insufficient fulfilment of data subjects rights
- SERVICIOS FINANCIEROS CARREFOUR, E.F.C.: Insufficient technical and organisational measures to ensure information security
- Aktia Pankki Oyj: Insufficient technical and organisational measures to ensure information security
- Comune di Isola del Gran Sasso: Insufficient legal basis for data processing
- Hestia Publishers & Booksellers I. D. Kollaros & Co. S.A.: Insufficient technical and organisational measures to ensure information security
- Provincia Autonoma di Bolzano: Non-compliance with general data processing principles
- Vimar S.p.A.: Insufficient legal basis for data processing
- Interprovincial Order of Medical Radiology Technicians and Technical Health Professions in Rehabilitation and Prevention of AQ - CH - PE - TE: Insufficient legal basis for data processing
- Order of Nursing Professions of Pisa: Insufficient legal basis for data processing
- Fan Courier Express S.R.L.: Insufficient fulfilment of data subjects rights
- THE RED KIWI, S.L.: Insufficient legal basis for data processing
- Municipality of Moschato–Tavros: Insufficient legal basis for data processing
- Telecommunications operator (operator of electronic communications networks and services): Non-compliance with general data processing principles
- APARELLS ORTOPEDICS CURTO, S.L: Insufficient fulfilment of data subjects rights
- 'Statista Aldo Moro' Higher Education Institute in Fara Sabina: Insufficient legal basis for data processing
- FT Solutions S.r.l.: Non-compliance with general data processing principles
- Infobel: Insufficient legal basis for data processing
- Journalist: Insufficient legal basis for data processing
- Comune di Curtarolo: Insufficient legal basis for data processing
- Mayor of the Municipality of Calvi Risorta: Insufficient legal basis for data processing
- Geturhotels Srl: Non-compliance with general data processing principles
- Ordine degli Avvocati di Latina: Insufficient legal basis for data processing
- Comune di Orte: Non-compliance with general data processing principles
- AXARQUIA VELEZ DENTAL, S.L.: Non-compliance with general data processing principles
- SOBLADA RESTAURACIÓN, S.L.: Non-compliance with general data processing principles
- STRATESYS TECHNOLOGY SOLUTIONS, S.L.: Insufficient technical and organisational measures to ensure information security
- ACTIVOS INTELIGENTES, S.L.: Non-compliance with general data processing principles
- SPRINTER MEGACENTROS DEL DEPORTE, S.L.: Insufficient technical and organisational measures to ensure information security
- RISING SUN CAR RENTAL S..L.: Non-compliance with general data processing principles
- DELAFRUIT, S.L.: Non-compliance with general data processing principles
- LastPass UK Ltd: Insufficient technical and organisational measures to ensure information security
- Quarantadue S.r.l.: Non-compliance with general data processing principles
- Verisure Italy s.r.l.: Non-compliance with general data processing principles
- Owner of a Tesla Car: Non-compliance with general data processing principles
- Bakery Chain: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Non-compliance with general data processing principles
- Debt collecting agancy (GESTIÓN DE COBROS, YO COBRO SL): Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient fulfilment of data subjects rights
- ENDESA (energy supplyer): Insufficient legal basis for data processing
- Restaurant (SANTI 3000, S.L.): Insufficient legal basis for data processing
- SLOVAKIA DPA: Insufficient technical and organisational measures to ensure information security
- SLOVAKIA DPA: Insufficient technical and organisational measures to ensure information security
- SLOVAKIA DPA: Insufficient legal basis for data processing
- Telecommunications company: Insufficient legal basis for data processing
- Coordinated Enforcement Action, implementation of the right of access by controllers
- EDPB Annual Report 2024
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Digital Rights Ireland Ltd v Minister for Communications
- Aimag S.p.A.: Non-compliance with general data processing principles
- Powiatowego Inspektora Sanitarnego w Policach: Insufficient technical and organisational measures to ensure information security
- Order of General Nurses, Midwives and Medical Assistants of Romania – Neamt Branch: Non-compliance with general data processing principles
- EXCEL HOTELS & RESORTS, S.A.: Insufficient technical and organisational measures to ensure information security
- Istituto Comprensivo Centro di Casalecchio di Reno: Insufficient fulfilment of data subjects rights
- FREE MOBILE: Insufficient technical and organisational measures to ensure information security
- Continental Automotive Products SRL: Insufficient technical and organisational measures to ensure information security
- SO Warszawa: Controller warned for violating GDPR Arts. 5(1), 6(1), and 15(1)
- Headquarter of a Fire Brigade: Insufficient legal basis for data processing
- Sole Trader: Insufficient legal basis for data processing
- Sole Trader: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Comune di Tuscania: Non-compliance with general data processing principles
- 'Principe Umberto di Savoia' State Scientific and Linguistic High School: Insufficient legal basis for data processing
- Roverbella Comprehensive School: Insufficient legal basis for data processing
- Comune di Nave: Insufficient legal basis for data processing
- Elba Catering Distribuzioni s.r.I.s.: Insufficient legal basis for data processing
- Data Controller: Insufficient legal basis for data processing
- Pioneer Hi-Bred Italia Sementi s.r.l.: Insufficient legal basis for data processing
- Anticimex s.r.l.: Insufficient legal basis for data processing
- LTL S.p.A.: Insufficient fulfilment of data subjects rights
- San Pio Hospital in Benevento: Insufficient legal basis for data processing
- Pro Loco Tourist Association of Cittareale: Insufficient legal basis for data processing
- Alessandro Volta Classical and Scientific High School in Como: Insufficient legal basis for data processing
- BAR GIOIA: Insufficient legal basis for data processing
- Macelleria La Costata s.r.I.s: Insufficient legal basis for data processing
- KVIKU SPAIN, S.L.: Non-compliance with general data processing principles
- Dental Clinic: Non-compliance with general data processing principles
- UODO fines accounting firm €2,760 for email breach security failures
- Dr. Paolo Montemurro: Insufficient legal basis for data processing
- Federazione Nazionale Ordini Professioni Infermieristiche (FNOPI): Insufficient legal basis for data processing
- Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania: Insufficient legal basis for data processing
- Istituto San Giuseppe La Salle di Milano: Non-compliance with general data processing principles
- Public and Private Domain SA: Insufficient legal basis for data processing
- Election Committee of Karol Nawrocki: Insufficient legal basis for data processing
- University of Limerick: Insufficient technical and organisational measures to ensure information security
- Domeniul Public și Privat SA: Insufficient legal basis for data processing
- Shop Owner: Insufficient legal basis for data processing
- Reddit, Inc.: Non-compliance with general data processing principles
- Chief Constable of the Police Service of Scotland: Insufficient technical and organisational measures to ensure information security
- Università Telematica e-Campus: Insufficient legal basis for data processing
- Ministero della Cultura: Non-compliance with general data processing principles
- Comune di Velletri: Non-compliance with general data processing principles
- Comune di Coccaglio: Non-compliance with general data processing principles
- Order of Physicians, Surgeons and Dentists of the Province of Macerata: Insufficient legal basis for data processing
- Comune di Monterotondo: Insufficient legal basis for data processing
- Sole Trader: Insufficient legal basis for data processing
- Based s.r.l.: Insufficient fulfilment of data subjects rights
- Bressanelli Galli Gelpi Porta & C. S.r.l.: Insufficient legal basis for data processing
- Comune di Mazara del Vallo: Insufficient legal basis for data processing
- Sole Trader: Insufficient fulfilment of information obligations
- Sole Trader: Insufficient legal basis for data processing
- Spain DPA: Non-compliance with general data processing principles
- HOLY MARY CATHOLIC SCHOOL, S.L.: Insufficient legal basis for data processing
- ORNITOLÓGICA DE ANDALUCÍA FOA: Non-compliance with general data processing principles
- Croatian Insurance Bureau: Insufficient technical and organisational measures to ensure information security
- FAVORIT SPORTSKA KLADIONICA d.o.o.: Insufficient technical and organisational measures to ensure information security
- Bank: Non-compliance with general data processing principles
- Sole Trader: Non-compliance with general data processing principles
- Accountancy Firm: Insufficient legal basis for data processing
- Restaurant Partner Polska: Insufficient legal basis for data processing
- Conservatory: Insufficient legal basis for data processing
- Ministero delle Imprese e del Made in Italy: Insufficient legal basis for data processing
- Depac Società Cooperativa Sociale a r.l.: Insufficient legal basis for data processing
- Ministero dell’Economia e delle Finanze: Insufficient legal basis for data processing
- Groupharma s.r.l.s.: Insufficient fulfilment of data subjects rights
- ARES CAPITAL, S.A.: Insufficient legal basis for data processing
- CUMACA MOTOR, S.L.: Insufficient legal basis for data processing
- Crowd Entertainment Ltd: Insufficient legal basis for data processing
- Bank of Cyprus Public Company Limited: Insufficient technical and organisational measures to ensure information security
- National Bank of Greece S.A: Insufficient technical and organisational measures to ensure information security
- Hospital: Non-compliance with general data processing principles
- Advertising Agency: Insufficient legal basis for data processing
- Law Firm: Insufficient fulfilment of data subjects rights
- Permanent TSB: Insufficient technical and organisational measures to ensure information security
- South Staffordshire Plc: Insufficient technical and organisational measures to ensure information security
- ITAS Mutua: Insufficient fulfilment of data subjects rights
- La7 S.p.A.: Non-compliance with general data processing principles
- Barber Shop: Insufficient fulfilment of information obligations
- Liceo Scientifico Morgagni di Roma: Insufficient technical and organisational measures to ensure information security
- INPS – Istituto nazionale previdenza sociale: Insufficient technical and organisational measures to ensure information security
- Hanako s.r.l.: Insufficient technical and organisational measures to ensure information security
- Comune di Sutri: Insufficient legal basis for data processing
- Euro Bangla Minimarket in Jesi: Insufficient legal basis for data processing
- Copacabana s.r.l.: Insufficient legal basis for data processing
- Business Owner: Insufficient legal basis for data processing
- Comune di Cassino: Insufficient legal basis for data processing
- Eni S.p.A.: Insufficient legal basis for data processing
- Intesa Sanpaolo S.p.A.: Insufficient technical and organisational measures to ensure information security
- Piacenza Bar Association: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- University of Szeged: Insufficient legal basis for data processing
- Ridetech International B.V.: Insufficient legal basis for data processing
- Technology Company: Insufficient legal basis for data processing
- Société Wallonne des Eaux: Insufficient legal basis for data processing
- Isabel SA: Insufficient fulfilment of data subjects rights
- Io e te s.r.l.s.: Insufficient legal basis for data processing
- Framos Italia s.r.l.: Non-compliance with general data processing principles
- Business Owner: Insufficient legal basis for data processing
- Comune di Campo Calabro: Insufficient legal basis for data processing
- Hungarian University of Agriculture and Life Sciences: Insufficient legal basis for data processing
- Obuda University: Insufficient legal basis for data processing
- Posada del León de Oro: Non-compliance with general data processing principles
- IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA: Insufficient technical and organisational measures to ensure information security
- KONECTA BTO, S.L.: Insufficient technical and organisational measures to ensure information security
- Elkjøp AS: Insufficient legal basis for data processing
- FTT allows appeal: NMC should have neither confirmed nor denied holding nurse's data
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- VDAI fines medical company €450,000 for inadequate security measures in data breaches
- SEUR GEOPOST, S.L.: Insufficient data processing agreement
- Reda Naujokaitienė: Insufficient legal basis for data processing
- CAIXABANK, S.A.: Insufficient technical and organisational measures to ensure information security
- ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L.: Insufficient technical and organisational measures to ensure information security
- UODO (Poland) - DKN.5131.27.2023
- DSB (Austria) - 2026-0.016.479
- APD/GBA (Belgium) - 11/2022
- CJEU - C-350/21 - Spetsializirana prokuratura (Retention of traffic and location data)
- HDPA (Greece) - 32/2020
- EWHC (UK) - Johnson v Eastlight Community Homes Ltd
- EDPB Annual Report 2025
- Statement 1/2025 on Age Assurance
- Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models
- Statement 4/2024 on the recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR
- Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR)
- Report of the work undertaken by the ChatGPT Taskforce
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space
- EDPB Annual Report 2021
- Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- Statement on the protection of personal data processed in relation with the prevention of money laundering and terrorist financing
- Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities
- Court upholds €50,000 fine on Sociálna poisťovňa for sending sensitive data by ordinary
- Amt der Tiroler Landesregierung v Datenschutzbehörde
- Maximilian Schrems v Meta Platforms Ireland Limited
- Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V
- Criminal proceedings against HYA and Others
- La Quadrature du Net and Others v Premier ministre and Ministère de la Culture
- Criminal proceedings against Unknown individuals
- Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
- État belge v Autorité de protection des données
- ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts
- A. G. v Lietuvos Respublikos generalinė prokuratūra
- UZ v Bundesrepublik Deutschland
- Norra Stockholm Bygg AB v Per Nycander AB
- HYA and Othersprokuratura
- WM and Sovim SA v Luxembourg Business Registers
- Bundesrepublik Deutschland v SpaceNet AG and Telekom Deutschland GmbH
- Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság
- G.D. v The Commissioner of the Garda Síochána and Others
- SIA 'SS' v Valsts ieņēmumu dienests
- Criminal proceedings against HP
- Mircom International Content Management & Consulting (M.I.C.M.) Limited v Telenet BVBA
- État luxembourgeois v B and Others
- TK v Asociaţia de Proprietari bloc M5A-ScaraA
- Proceedings brought by Ministerio Fiscal
- Maximilian Schrems v Facebook Ireland Limited
- Tele2 (Netherlands) BV and Others v Autoriteit Consument en Markt (ACM)
- Tele2 Sverige AB v Post- och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others
- Verein für Konsumenteninformation v Amazon EU Sàrl
- KPN BV v Autoriteit Consument en Markt (ACM)
- W. P. Willems and Others v Burgemeester van Nuth and Others
- Judgment of the Court (Third Chamber), 22 November 2012.#Josef Probst v mr.nexnet GmbH.#Reference for a preliminary ruling from the Bundesgerichtshof.#Electronic communications — Directive 2002/58/EC — Article 6(2) and (5) — Processing of personal data — Traffic data necessary for billing and debt collection — Debt collection by a third company — Persons acting under the authority of the providers of public communications networks and electronic communications services.#Case C‑119/12.
- LSG-Gesellschaft zur Wahrnehmung von Leistungsschutzrechten GmbH v Tele2 Telecommunication GmbH
- Use of Artificial Intelligence Tools by Law Enforcement Services in Light of the Artificial Intelligence Act
- CA - EWCA Civ 899 Vince v. Associated Newspapers Limited
- DSB (Austria) - 2026-0.043.390
- Hoge Raad - ECLI:NL:PHR:2023:935
- HDPA (Greece) - 33/2020
- DSB (Austria) - 2025-0.950.759
- Austrian court reviews postal service selling political affinity data of customers
- UODO (Poland) - DKN.5131.5.2025
- DSB (Austria) - 2025-1.049.138
- Austrian FAC rules on publishing full court judgment naming witness on social media
- Garante per la protezione dei dati personali (Italy) - 556/2026
- Garante per la protezione dei dati personali (Italy) - 10273026
- MEDE S.A.: Non-compliance with general data processing principles
- Market-In: Non-compliance with general data processing principles
- HDPA: Hellenic Open University found to have met breach notification duties after
- Austrian DSB: Employee who shared customer's phone number acted as GDPR controller
- DSB: Retailer must grant full access and delete data after third-party fraud order
- UODO reprimands mayor for disclosing data subject's data to company without legal basis
- Finnish DPA examines anti-doping organization's GDPR compliance over public suspension
- HDPA orders TEIRESIAS S.A. to ensure data accuracy under Art. 5(1)(d) GDPR
- BVwG - W137 2334047-1
- HDPA (Greece) - 15/2026
- Lepida S.c.p.A.: Non-compliance with general data processing principles
- InMedica UAB: Insufficient technical and organisational measures to ensure information security
- Permanent TSB plc: Insufficient technical and organisational measures to ensure information security
- Dr. Guzzo: Insufficient legal basis for data processing
- Montelibretti State Comprehensive School: Insufficient legal basis for data processing
- Persónuvernd (Iceland) - 2025010364
- BVwG - W292 2292202-1
- Ministry of Justice: Insufficient legal basis for data processing
- Danta di Cadore Hunting Reserve: Insufficient fulfilment of information obligations
- FeGi M&A Services s.r.l.: Non-compliance with general data processing principles
- Emirates: Insufficient fulfilment of information obligations
- AMATO BESTSELLER S.R.L: Non-compliance with general data processing principles
- Pianeta S.r.l.: Non-compliance with general data processing principles
- BVwG - W298 2314952-1
- Lidl Italia S.r.l.: Insufficient fulfilment of data subjects rights
- Vortika s.r.l.: Insufficient fulfilment of information obligations
- Liguria Health Protection Authority: Insufficient legal basis for data processing
- Ristorante Carlo Menta s.r.l.: Insufficient fulfilment of information obligations
- Rosetta Trastervere s.r.l.s.: Insufficient fulfilment of information obligations
- Monaldi-Cotugno-CTO: Non-compliance with general data processing principles
- Municipality of Mirabella Imbaccari: Insufficient legal basis for data processing
- Pietro d'Abano State Vocational School: Insufficient legal basis for data processing
- Municipality of Sciacca: Insufficient legal basis for data processing
- Autonomous Region of Sardinia: Insufficient legal basis for data processing
- Italian Red Cross: Non-compliance with general data processing principles
- Municipality of Vasto: Insufficient fulfilment of information obligations
- Lecce Local Health Authority: Insufficient technical and organisational measures to ensure information security
- Cosmint S.p.A.: Non-compliance with general data processing principles
- Edizioni Grandangolo di Giuseppe Castaldo: Non-compliance with general data processing principles
- Experian Italia S.p.A.: Non-compliance with general data processing principles
- Giuliano Isontina University Health Authority: Insufficient technical and organisational measures to ensure information security
- University of Pisa: Insufficient technical and organisational measures to ensure information security
- Docplanner Italy S.r.l.: Insufficient technical and organisational measures to ensure information security
- Hera Comm S.p.A.: Non-compliance with general data processing principles
- EstEnergy S.p.A.: Non-compliance with general data processing principles
- Cerved Group S.p.A.: Insufficient fulfilment of data subjects rights
- Società Editoriale Il Fatto S.p.A.: Insufficient legal basis for data processing
- Municipality of San Genesio and Uniti: Insufficient legal basis for data processing
- Municipality of Villaputzu: Insufficient legal basis for data processing
- Municipality of Terralba: Insufficient legal basis for data processing
- Ancel Keys Comprehensive School Castelnuovo Cilento: Insufficient legal basis for data processing
- NIER Ingeriegna S.p.A. SB: Insufficient technical and organisational measures to ensure information security
- Municipality of Rieti: Non-compliance with general data processing principles
- La Terrazza: Insufficient fulfilment of information obligations
- FTT upholds UKIPO's FOIA withholding of copyright exception documents under s.27
- FTT: Kent County Council FOIA refusal of Kent Test scores and DOB upheld
- European Commission v Hungary
- BVwG reduces DPA fine for undisclosed call recording from €25,500 to €22,000
- HDPA investigates Greek Infrastructure Ministry for SMS sent without consent or
- Persónuvernd: Icelandic Farmers’ Association breached GDPR by disclosing owner data to
- Top Secrert Investigazioni e sicurezza s.r.l.: Non-compliance with general data processing principles
- Monza and Brianza Local Education Authority: Insufficient legal basis for data processing
- Sole trader providing accounting and tax advisory services: Insufficient technical and organisational measures to ensure information security
- Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access
- Italian DPA: Municipality of Aprilia unlawfully disclosed whistleblower data to employer
- Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at
- Icelandic DPA: City of Reykjavik cannot request bank statements from NPA disabled service
- District Governor of Lubartów: Insufficient technical and organisational measures to ensure information security
- ZeniΘ (Thessaloniki-Thessalia Gas Supply Company S.A.): Insufficient fulfilment of data subjects rights
- Public Power Corporation S.A. (DEI): Insufficient legal basis for data processing
- Ypiresia 800 Teleperformance Single Member S.A.: Insufficient technical and organisational measures to ensure information security
- Operator of an online shop for alcoholic beverages: Insufficient fulfilment of information obligations
- Operator of an online marketplace: Insufficient fulfilment of information obligations
- EDPB-EDPS Joint Opinion 4/2026 on the Proposal for a Cybersecurity Act 2 and the Proposal on amendments to the NIS 2 Directive