Laws · GDPR ·art-6-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Processing shall be lawful only if and to the extent that at least one of the following applies:
How it connects
Cited by
- Record fine for Instagram following EDPB intervention
- Belgian DPA: Employer unlawfully disclosed employee health data to colleagues (115/2022)
- Belgian DPA: Legitimate interest can justify direct marketing to recent former customers
- Guidelines 05/2020 on consent under Regulation 2016/679
- Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020
All 754
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 3/2019 on processing of personal data through video devices
- Guidelines 04/2022 on the calculation of administrative fines under the GDPR
- Guidelines 8/2020 on the targeting of social media users
- Guidelines 02/2021 on virtual voice assistants
- Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR
- Private person: Insufficient legal basis for data processing
- Car renting company: Insufficient fulfilment of information obligations
- Medical centers: Insufficient legal basis for data processing
- PWC Business Solutions: Insufficient legal basis for data processing
- Inteligo Media SA: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Town of Kerepes: Insufficient legal basis for data processing
- National Revenue Agency: Insufficient legal basis for data processing
- Telecommunication service provide: Insufficient legal basis for data processing
- Telecommunication service provide: Insufficient legal basis for data processing
- Commercial representative of telecommunication service provider: Insufficient legal basis for data processing
- The Ministry of Interior Affairs: Insufficient legal basis for data processing
- Website providing legal information: Insufficient fulfilment of information obligations
- Xfera Moviles S.A.: Insufficient legal basis for data processing
- Utility Company: Insufficient legal basis for data processing
- Banco Bilbao Vizcaya Argentaria, SA: Insufficient legal basis for data processing
- Forbes Hungary: Insufficient legal basis for data processing
- Vodafone Italia S.p.A.: Non-compliance with general data processing principles
- Servicio de Alojamientos Responsables, S.L.: Insufficient legal basis for data processing
- Asociación de Víctimas por Arbitrariedades Judiciales, (JAVA): Insufficient legal basis for data processing
- Xfera Moviles S.A.: Insufficient legal basis for data processing
- Uppsalahem AB: Insufficient legal basis for data processing
- Online Services: Insufficient fulfilment of information obligations
- Concentrix Cvg Italy s.r.l.: Insufficient legal basis for data processing
- ING Bank N.V. Amsterdam - Bucharest office: Insufficient legal basis for data processing
- Innovasjon Norge: Insufficient legal basis for data processing
- CZECH REPUBLIC DPA: Insufficient legal basis for data processing
- BELGIUM DPA: Insufficient legal basis for data processing
- Alterna Operador Integral S.L.: Insufficient legal basis for data processing
- Telefónica Móviles España, SAU: Insufficient legal basis for data processing
- Lursoft IT SIA: Insufficient legal basis for data processing
- HUNGARY DPA: Insufficient legal basis for data processing
- Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics): Insufficient legal basis for data processing
- I-DE Redes Eléctricas Inteligentes, S.A.U: Non-compliance with general data processing principles
- Electricity Authority of Cyprus: Insufficient legal basis for data processing
- Filigrana Comunicación S.L.U.: Insufficient fulfilment of information obligations
- Comune di Santo Stefano Belbo: Non-compliance with general data processing principles
- Comune di Luino: Non-compliance with general data processing principles
- Equifax Iberica S.L.: Insufficient legal basis for data processing
- NBQ Technology, S.A.U.: Insufficient legal basis for data processing
- Ministero dello Sviluppo Economico: Non-compliance with general data processing principles
- School: Insufficient legal basis for data processing
- Cultural association: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Comune di Conflenti: Insufficient legal basis for data processing
- Dragefossen AS: Insufficient legal basis for data processing
- Miljø- og Kvalitetsledelse AS: Insufficient legal basis for data processing
- Ski rental company: Non-compliance with general data processing principles
- Ιγνατιάδης Νικόλαος και ΣΙΑ Ε.Ε.: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Highcliffe Estates Marbella S.L.: Insufficient legal basis for data processing
- Comune di San Marco in Lamis: Insufficient legal basis for data processing
- Public university: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- CZECH REPUBLIC DPA: Non-compliance with general data processing principles
- Equifax Iberica S.L.: Insufficient legal basis for data processing
- Municipality of Enschede: Insufficient legal basis for data processing
- Mediacom s.r.l.: Insufficient legal basis for data processing
- Planet Group Spa: Insufficient legal basis for data processing
- OneDirect Srl: Insufficient legal basis for data processing
- Comune di Castellanza: Insufficient legal basis for data processing
- Website operator: Non-compliance with general data processing principles
- Municipal Organization for Pre-School Education and Social Solidarity (DOPAKA) of the municipality of Tavros Moschato: Insufficient legal basis for data processing
- Innovasjon Norge: Insufficient legal basis for data processing
- Creator Energy S.L.: Insufficient legal basis for data processing
- Master Distancia S.A.: Insufficient legal basis for data processing
- Storstockholms Lokaltrafik: Insufficient legal basis for data processing
- Iren Mercato S.p.A.: Insufficient legal basis for data processing
- Huppuís ehf: Non-compliance with general data processing principles
- Caixabank S.A.: Insufficient legal basis for data processing
- Private Individual: Insufficient legal basis for data processing
- SPAIN DPA: Insufficient legal basis for data processing
- Private Individual: Insufficient legal basis for data processing
- Private Individual: Insufficient legal basis for data processing
- PRA Iberia S.L.: Insufficient legal basis for data processing
- Body Tonic Shop S.L.: Insufficient legal basis for data processing
- Gerco Fit S.L.: Insufficient legal basis for data processing
- Vasco Andaluza de Inversiones S.L.: Insufficient legal basis for data processing
- INSTAPACK, S.L.: Insufficient legal basis for data processing
- Private Individual: Insufficient legal basis for data processing
- Gas inspector: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Magyar Telekom Nyrt.: Insufficient fulfilment of data subjects rights
- Regione Lombardia: Non-compliance with general data processing principles
- NOW DOCTOR – Εταιρία Παροχής Ηλεκτρονικών Υπηρεσιών Αναζήτησης και Προβολής Ιατρών Ε.Π.Ε.: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Ultra-Technology AS: Insufficient legal basis for data processing
- ORANGE ESPAGNE, S.A.U.: Insufficient legal basis for data processing
- Facebook Ireland Limited: Insufficient fulfilment of information obligations
- Sky Italia S.r.l.: Insufficient legal basis for data processing
- Glove Technology SRL: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- VODAFONE SERVICIOS, S.L.U.: Insufficient legal basis for data processing
- VODAFONE SERVICIOS, S.L.U.: Insufficient legal basis for data processing
- S.P.E.E.H. Hidroelectrica S.A.: Insufficient technical and organisational measures to ensure information security
- Comune di Montalbano Jonico: Non-compliance with general data processing principles
- Vodafone España, SAU: Insufficient legal basis for data processing
- Vodafone España, SAU: Insufficient legal basis for data processing
- Vodafone España, SAU: Insufficient legal basis for data processing
- UNIÓN FINANCIERA ASTURIANA S.A. E.F.C.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- NBQ Technology, S.A.U.: Insufficient legal basis for data processing
- Dutch Minister of Finance: Insufficient legal basis for data processing
- Norwegian State Pension Fund (SPK): Insufficient legal basis for data processing
- Grindr LLC: Insufficient legal basis for data processing
- Car importer: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Sfam España General s.l.: Insufficient legal basis for data processing
- HUBSIDE IBÉRICA S.L.: Insufficient legal basis for data processing
- REAL CLUB NÁUTICO DE RIBADEO: Insufficient legal basis for data processing
- Elektro & Automasjon Systemer AS: Insufficient legal basis for data processing
- EDUCANDO JUNTOS SL: Insufficient legal basis for data processing
- C-Planet (IT Solutions) Limited: Insufficient technical and organisational measures to ensure information security
- VODAFONE ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- MEETING PUERTO C.B.: Insufficient legal basis for data processing
- Enel Energia S.p.A: Insufficient legal basis for data processing
- Lawyer: Insufficient legal basis for data processing
- Cyrana España General S.L.: Insufficient legal basis for data processing
- Researcher: Non-compliance with general data processing principles
- EU DisinfoLab: Non-compliance with general data processing principles
- B&T S.p.A.: Insufficient legal basis for data processing
- Aimon Srl: Insufficient legal basis for data processing
- Operator of a ballet school: Insufficient legal basis for data processing
- Medical assistant: Insufficient legal basis for data processing
- IAB Europe: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Etterforsker1 Gruppen AS: Insufficient legal basis for data processing
- Amazon Road Transport Spain S.L.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- BREBAU GmbH: Insufficient legal basis for data processing
- Brussels Airport Zaventem: Insufficient legal basis for data processing
- Brussels Airport Charleroi: Insufficient legal basis for data processing
- Company: Insufficient fulfilment of data subjects rights
- Dutch Tax and Customs Administration: Non-compliance with general data processing principles
- JIMBO NETWORKS, S.L.: Insufficient fulfilment of information obligations
- Website operator: Insufficient fulfilment of information obligations
- Company: Insufficient legal basis for data processing
- MOVALIA TRASLADOS, S.L.U.: Insufficient legal basis for data processing
- Physician: Insufficient legal basis for data processing
- CAFFE VECCHIO, S.L.: Insufficient legal basis for data processing
- Nationale Maatschappij der Belgische Spoorwegen: Insufficient legal basis for data processing
- MISTORE CANARIAS, S.L.: Insufficient legal basis for data processing
- MEDEROS MOVITEN, S.L.: Insufficient legal basis for data processing
- Working Capital Management España, S.L.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Workshop: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Roularta Media Group: Insufficient legal basis for data processing
- Educationest s.r.l.: Insufficient legal basis for data processing
- Istituto Nazionale Assicurazione Infortuni sul Lavoro: Insufficient technical and organisational measures to ensure information security
- SA Rossel & Cie: Insufficient legal basis for data processing
- Arbeidstilsynet: Insufficient legal basis for data processing
- Budapest Bank Zrt.: Insufficient legal basis for data processing
- FLY FUT, S.L.: Insufficient legal basis for data processing
- Alquiler Seguro SA: Insufficient legal basis for data processing
- Azienda Sanitaria Locale Roma: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- City of Rome (Roma capitale): Insufficient legal basis for data processing
- Region of Tuscany: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- TELEFÓNICA MÓVILES ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- Hannoversche Volksbank: Insufficient legal basis for data processing
- Territorial Administration of the Government of Genoa: Insufficient legal basis for data processing
- Santa Ninfa municipality: Insufficient legal basis for data processing
- ECOZONO Y CULTURA, S.L.: Insufficient legal basis for data processing
- Meta Platforms, Inc.: Non-compliance with general data processing principles
- DIGITECNIA SOLUTIONS, S.L.: Insufficient legal basis for data processing
- Recover AS: Insufficient legal basis for data processing
- Federazione Italiana Sommelier, Albergatori e Ristoratori: Non-compliance with general data processing principles
- Property development company: Insufficient legal basis for data processing
- MARIELI GABRIELA, S.L.: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Surveyor: Insufficient legal basis for data processing
- CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- UNION DE OFICIALES DE LA GUARDIA CIVIL PROFESIONAL: Insufficient legal basis for data processing
- Website operator: Non-compliance with general data processing principles
- Bank: Insufficient legal basis for data processing
- SEAN SERIOS S.L.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- ACKERMANN & SCHWARTZ ATTORNEYS AT LAW SLP: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Colosseo S.r.l.: Insufficient fulfilment of data subjects rights
- CÍTRICOS TANTA, S.L.: Insufficient legal basis for data processing
- Rapido Finance, S.L.: Insufficient legal basis for data processing
- TECHPUMP SOLUTIONS S.L.: Non-compliance with general data processing principles
- XASTRE DO PETO, S.L.: Insufficient legal basis for data processing
- AMPLIFON Hungary Trade and Service Provider LLC: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- HOSPITAL RECOLETAS PONFERRADA, S.L.: Insufficient legal basis for data processing
- ORANGE ESPAGNE, S.A.U.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Meta Platforms Ireland Limited: Non-compliance with general data processing principles
- I-Model s.r.l.: Insufficient legal basis for data processing
- SERVICIOS INTEGRALES DEL HOGAR TENERIFE, S.L.: Insufficient legal basis for data processing
- Homeowners Association: Insufficient legal basis for data processing
- SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- WhatsApp Ireland Ltd.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Homeowners Association: Insufficient legal basis for data processing
- CASAL DE L'ESPLUGA DE FRANCOLÍ: Insufficient legal basis for data processing
- Dentist: Insufficient legal basis for data processing
- FACTOR ENERGÍA, S.A.: Insufficient legal basis for data processing
- Fondazione Teatro Regio di Torino: Insufficient legal basis for data processing
- PIONIER (law firm): Insufficient legal basis for data processing
- Comune di Monte Sant'Angelo: Insufficient legal basis for data processing
- News service: Insufficient legal basis for data processing
- Mister Brick S.a.s.: Insufficient legal basis for data processing
- Manager of a real estate co-ownership: Insufficient legal basis for data processing
- Debt collection company: Insufficient legal basis for data processing
- Sats ASA: Insufficient fulfilment of data subjects rights
- Private individual: Insufficient legal basis for data processing
- Orange Espagne S.A.U.: Insufficient legal basis for data processing
- CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- ENFOKA SISTEMAS GLOBALES, S.L.: Insufficient legal basis for data processing
- Covid-19 test center: Insufficient legal basis for data processing
- BANCO BILBAO VIZCAYA ARGENTARIA, S.A.: Insufficient legal basis for data processing
- TV2 Média Csoport Zrt.: Non-compliance with general data processing principles
- Vodafone: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- VODAFONE ONO, S.A.U.: Insufficient legal basis for data processing
- Covid-19 test center: Insufficient legal basis for data processing
- Covid-19 test center: Non-compliance with general data processing principles
- Operator of a public toilet: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- Telefónica Móviles España, S.A.U.: Insufficient legal basis for data processing
- Operator of a swimming pool: Insufficient legal basis for data processing
- Aesse S.r.l.s.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- FUNDACIÓ PRIVADA UNIVERSITARIA EADA: Insufficient legal basis for data processing
- Hotel: Insufficient legal basis for data processing
- Coin dealer: Non-compliance with general data processing principles
- Debt collection agency: Insufficient technical and organisational measures to ensure information security
- Πολίτης newspaper: Non-compliance with general data processing principles
- Epic Ltd.: Insufficient legal basis for data processing
- I&S Limited Kft: Non-compliance with general data processing principles
- Credit institution: Insufficient legal basis for data processing
- ESTUDIO INMOBILIARIO SAN ISIDRO, S.L.U.: Insufficient legal basis for data processing
- Razmataz Live s.r.l..: Non-compliance with general data processing principles
- Political party: Insufficient legal basis for data processing
- Compania Națională Poșta Română S.A.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Sports betting operator: Insufficient legal basis for data processing
- VODAFONE ONO, S.A.U.: Insufficient legal basis for data processing
- ALPA 57 PRODUCCIONES: Insufficient legal basis for data processing
- Digi Spain Telecom, S.L.U.: Insufficient legal basis for data processing
- Digi Spain Telecom, S.L.U.: Insufficient legal basis for data processing
- FUSIONA SOLUCIONES ENERGÉTICAS, S.A.: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- Digi Spain Telecom, S.L.U.: Insufficient legal basis for data processing
- Digi Spain Telecom, S.L.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- MALTA DPA: Non-compliance with general data processing principles
- Bonnier News AB: Insufficient legal basis for data processing
- ODAFONE SERVICIOS, S.L.U.: Insufficient legal basis for data processing
- KUGELCHEN PROPIERTIES, S.L.: Insufficient legal basis for data processing
- Almennri innheimtu ehf: Insufficient legal basis for data processing
- eCommerce 2020 ApS: Insufficient legal basis for data processing
- Creditinfo Lánstraust hf.: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- NANDIVALE, S.L: Insufficient legal basis for data processing
- Irish Departement of Health: Non-compliance with general data processing principles
- SERVICIOS E INTERVENCIONES EN EDIFICACION DEL MEDITERRÁNEO, S.L.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- TELEFÓNICA MÓVILES ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- JOLY DIGITAL, S.L.U.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Private individual: Insufficient fulfilment of information obligations
- SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- Hotel: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Debt collection company: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Schockholm School borard: Non-compliance with general data processing principles
- San Severo municipality: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Università Telematica E-Campus: Non-compliance with general data processing principles
- SC Spark Car Sharing SRL: Non-compliance with general data processing principles
- DIGI SPAIN TELECOM, S.L.: Insufficient legal basis for data processing
- Ministero dell'Ambiente e della Sicurezza Energetica: Non-compliance with general data processing principles
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- QUALITY-PROVIDER S.A.: Insufficient legal basis for data processing
- SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.: Insufficient legal basis for data processing
- Voorschoten municipality: Non-compliance with general data processing principles
- Eurocollege Oxford English Institute S.L.: Non-compliance with general data processing principles
- VODAFONE ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- Region of Lombardy: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Municipality: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- VUKMAL TRADE, S.L.: Insufficient legal basis for data processing
- Istituto Comprensivo Statale “F.S. Cabrini: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- ORANGE ESPAGNE S.A.U.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.: Non-compliance with general data processing principles
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- VODAFONE ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- CAIXABANK, S.A: Insufficient legal basis for data processing
- Supermarket: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Betting company: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Facile.Energy S.r.l.: Non-compliance with general data processing principles
- Olimpia S.r.l.: Non-compliance with general data processing principles
- ARRENDAMIENTOS DEUDORES, S.L.: Insufficient legal basis for data processing
- Azzurro Club Hotels S.r.l.: Insufficient legal basis for data processing
- NATURGY IBERIA, S.A.: Insufficient legal basis for data processing
- Club Balonmano Gijón: Insufficient legal basis for data processing
- ASSOCIACIO OASIS CULTURAL: Insufficient legal basis for data processing
- Comune di Ustica: Non-compliance with general data processing principles
- WWPD CINVENTO INTERNATIONAL PATENT TRADING, S.L.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- National Prosecutor's Office: Insufficient legal basis for data processing
- Clearview AI Inc.: Non-compliance with general data processing principles
- SANTANDER CONSUMER FINANCE, S.A.: Insufficient legal basis for data processing
- Clinic owner: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- LinkedIn: Insufficient legal basis for data processing
- Profi Rom Food SRL: Insufficient legal basis for data processing
- IBERCAJA BANCO, S.A.: Insufficient legal basis for data processing
- Private individual: Insufficient legal basis for data processing
- PLAY FUL KIDS, S.L.: Insufficient legal basis for data processing
- Debt collection service provider: Insufficient legal basis for data processing
- VODAFONE ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- VODAFONE ESPAÑA, S.A.U.: Insufficient legal basis for data processing
- Hospital: Insufficient technical and organisational measures to ensure information security
- Coolblue B.V: Insufficient legal basis for data processing
- Centrum Medyczne Ujastek Sp. z o.o.: Non-compliance with general data processing principles
- Sky Italia S.r.l.: Insufficient legal basis for data processing
- LÍNEA DIRECTA ASEGURADORA, S.A.: Insufficient legal basis for data processing
- Posti Jakelu Oy: Insufficient legal basis for data processing
- GSMA Limited: Insufficient legal basis for data processing
- Member of the European Parliament: Insufficient legal basis for data processing
- Poczta Polska SA (Polish Post): Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- Vodafone España, S.A.U.: Insufficient legal basis for data processing
- BANCO BILBAO VIZCAYA ARGENTARIA, S.A.: Insufficient legal basis for data processing
- ING BANK N.V., SUCURSAL EN ESPAÑA: Insufficient legal basis for data processing
- Minister of Digital Affairs: Insufficient legal basis for data processing
- Chief Commander of the Police: Insufficient legal basis for data processing
- ROCA & ASOCIADOS ABOGADOS Y ECONOMISTAS, S.L.P.: Insufficient legal basis for data processing
- Granit Bostad Beritsholm AB: Insufficient legal basis for data processing
- Primary Health Care in the Capital Area: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Company: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Real Estate Agency: Insufficient cooperation with supervisory authority
- Attorney: Insufficient legal basis for data processing
- SERVICIOS DE INTEGRACIÓN DE ANDALUCÍA: Insufficient legal basis for data processing
- FUNDACIÓ PRIVADA DE SERVEIS PER ALS USUARIS DEL HABITATGE SOCIAL DE CATALUNYA: Insufficient legal basis for data processing
- Doctor´s Office: Insufficient legal basis for data processing
- Doctor´s Office: Insufficient legal basis for data processing
- Doctor´s Office: Insufficient technical and organisational measures to ensure information security
- Company: Insufficient legal basis for data processing
- Owner of a Pharmacy Office: Non-compliance with general data processing principles
- Owner of a Pharmacy Office: Non-compliance with general data processing principles
- UNIÓN DE CRÉDITO PARA LA FINANCIACIÓN MOBILIARIA E INMOBILIARIA EFC: Insufficient legal basis for data processing
- Realmaps S.r.l.: Insufficient legal basis for data processing
- ESTUDIO ALCAZAR DEL GENIL 2022, S.L.: Insufficient legal basis for data processing
- Departement of Social Security: Insufficient legal basis for data processing
- Kristiansand municipality: Insufficient legal basis for data processing
- l’Istituto Alberghiero Mediterraneo di Pulsano: Insufficient legal basis for data processing
- Interflora Italia S.p.A.: Insufficient legal basis for data processing
- Municipality of Roccaraso: Insufficient legal basis for data processing
- Immobiliare Valdalpone S.r.l.: Non-compliance with general data processing principles
- Undici S.r.l.s.: Non-compliance with general data processing principles
- Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.: Non-compliance with general data processing principles
- Multiple Companies: Insufficient legal basis for data processing
- MA Immobiliare S.r.l.s.: Non-compliance with general data processing principles
- Noi Compriamo Auto.it S.r.l.: Non-compliance with general data processing principles
- Banca Transilvania S.A.: Insufficient legal basis for data processing
- Tensa Art Design S.A.: Insufficient legal basis for data processing
- ROUMASPORT SRL: Insufficient legal basis for data processing
- Romoffice Construct Holding Ag SRL: Insufficient legal basis for data processing
- Data Diggers Market Research SRL: Non-compliance with general data processing principles
- MP Dumitru Viorel Focșa: Insufficient legal basis for data processing
- SC Diamir SRL: Non-compliance with general data processing principles
- SC Piramida Trade Invest SRL: Non-compliance with general data processing principles
- Alliance for the Union of Romanians Party: Non-compliance with general data processing principles
- ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.: Insufficient legal basis for data processing
- TELEFÓNICA MÓVILES ESPAÑA, S.A.: Insufficient legal basis for data processing
- LVMH IBERIA, S.L.: Insufficient legal basis for data processing
- SILVANERGIA 2022, S.L.: Insufficient legal basis for data processing
- COLEGIO VIRGEN DE EUROPA, S.L.: Insufficient legal basis for data processing
- Company: Non-compliance with general data processing principles
- Municipality of Bologna: Insufficient technical and organisational measures to ensure information security
- Police Officer: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient fulfilment of data subjects rights
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Legal Person: Insufficient legal basis for data processing
- Self Employed Person: Insufficient legal basis for data processing
- CAMERDATA, S.A.: Insufficient legal basis for data processing
- ING Bank Śląski: Insufficient legal basis for data processing
- CLUB BALONCESTO TELDE: Insufficient legal basis for data processing
- Landlord: Insufficient legal basis for data processing
- Università degli Studi di Cassino e del Lazio Meridionale: Non-compliance with general data processing principles
- Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli: Insufficient legal basis for data processing
- KVIKU SPAIN, S.L.: Insufficient legal basis for data processing
- GOHIPOTECA, S.L.: Insufficient legal basis for data processing
- Secretary of the Central Election Commission Konstantin Ninov: Insufficient legal basis for data processing
- Comune di Venezia: Non-compliance with general data processing principles
- Chamber of Commerce, Industry, Services and Navigation of Spain: Insufficient legal basis for data processing
- Political Party: Insufficient legal basis for data processing
- Telecommunications Operator: Non-compliance with general data processing principles
- SERVACE S.L.: Non-compliance with general data processing principles
- Municipality of Buccino: Insufficient legal basis for data processing
- Experian Nederland B.V.: Insufficient legal basis for data processing
- IKEA: Insufficient legal basis for data processing
- Comune di Nichelino: Insufficient legal basis for data processing
- DIGI SPAIN TELECOM, S.L.U.: Insufficient legal basis for data processing
- Whitedecor SRL: Insufficient legal basis for data processing
- La Prima Srl: Insufficient legal basis for data processing
- Provincia Autonoma di Bolzano: Non-compliance with general data processing principles
- Interprovincial Order of Medical Radiology Technicians and Technical Health Professions in Rehabilitation and Prevention of AQ - CH - PE - TE: Insufficient legal basis for data processing
- Order of Nursing Professions of Pisa: Insufficient legal basis for data processing
- Fan Courier Express S.R.L.: Insufficient fulfilment of data subjects rights
- Telecommunications operator (operator of electronic communications networks and services): Non-compliance with general data processing principles
- 'Statista Aldo Moro' Higher Education Institute in Fara Sabina: Insufficient legal basis for data processing
- FT Solutions S.r.l.: Non-compliance with general data processing principles
- Infobel: Insufficient legal basis for data processing
- Journalist: Insufficient legal basis for data processing
- Cucina di Fabio S.R.L.: Insufficient legal basis for data processing
- Comune di Curtarolo: Insufficient legal basis for data processing
- Mayor of the Municipality of Calvi Risorta: Insufficient legal basis for data processing
- Geturhotels Srl: Non-compliance with general data processing principles
- Ordine degli Avvocati di Latina: Insufficient legal basis for data processing
- Comune di Orte: Non-compliance with general data processing principles
- Owner of a Tesla Car: Non-compliance with general data processing principles
- Bakery Chain: Non-compliance with general data processing principles
- SLOVAKIA DPA: Insufficient legal basis for data processing
- Telecommunications company: Insufficient legal basis for data processing
- Rijeka Court: AZOP decision on media reporting of former Zagrebački Holding board
- HvJ EU 9 januari 2025, C‑394/23 (Mousse).
- Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Study on the secondary use of personal data in the context of scientific research
- EDPB Annual Report 2024
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Opinion 16/2025 regarding the draft decision of the German North Rhine Westphalia Supervisory Authority regarding Trusted Site Data Privacy (TÜV IT) certification criteria
- Guidelines 3/2025 on the interplay between the DSA and the GDPR
- EDPB contribution to the EBA public consultation on draft regulatory technical standards on AML/CFT
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision
- Digital Rights Ireland Ltd v Minister for Communications
- GC and Others v CNIL
- Google LLC v CNIL
- Peter Nowak v Data Protection Commissioner
- Meta Platforms v noyb
- Deutsche Wohnen SE v Staatsanwaltschaft Berlin
- SO Warszawa: Controller warned for violating GDPR Arts. 5(1), 6(1), and 15(1)
- Court of Justice of the European Union - Case C-422/24 - AB Storstockholms Lokaltrafik.
- Company: Non-compliance with general data processing principles
- Legal Entity: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Legal Entity: Insufficient legal basis for data processing
- Comune di Tuscania: Non-compliance with general data processing principles
- Roverbella Comprehensive School: Insufficient legal basis for data processing
- Comune di Nave: Insufficient legal basis for data processing
- Municipality of Delft: Insufficient legal basis for data processing
- Municipality of Ede: Insufficient legal basis for data processing
- Municipality of Eindhoven: Insufficient legal basis for data processing
- Municipality of Gooise Meren: Insufficient legal basis for data processing
- Municipality of Haarlemmermeer: Insufficient legal basis for data processing
- Municipality of Hilversum: Insufficient legal basis for data processing
- Municipality of Huizen: Insufficient legal basis for data processing
- Municipality of Tilburg: Insufficient legal basis for data processing
- Municipality of Veenendaal: Insufficient legal basis for data processing
- Municipality of Zoetermeer: Insufficient legal basis for data processing
- Debt Collector: Insufficient fulfilment of data subjects rights
- Pioneer Hi-Bred Italia Sementi s.r.l.: Insufficient legal basis for data processing
- Alessandro Volta Classical and Scientific High School in Como: Insufficient legal basis for data processing
- Municipality of Cori: Insufficient legal basis for data processing
- Garante per la protezione dei dati personali (Italy) - 10214411
- AEPD (Spain) - EXP202306354 (PS/00312/2024)
- SO Warszawa - III C 904/23
- BGH - V ZB 90/25
- Like to play alone? Ubisoft is still watching you!
- EU Court: Irish DPC must investigate noyb complaint
- Facebook's GDPR bypass reaches Austrian Supreme Court
- Federazione Nazionale Ordini Professioni Infermieristiche (FNOPI): Insufficient legal basis for data processing
- Istituto tecnico industriale statale “Stanislao Cannizzaro” di Catania: Insufficient legal basis for data processing
- Election Committee of Karol Nawrocki: Insufficient legal basis for data processing
- Shop Owner: Insufficient legal basis for data processing
- Reddit, Inc.: Non-compliance with general data processing principles
- Università Telematica e-Campus: Insufficient legal basis for data processing
- Comune di Coccaglio: Non-compliance with general data processing principles
- Order of Physicians, Surgeons and Dentists of the Province of Macerata: Insufficient legal basis for data processing
- Bressanelli Galli Gelpi Porta & C. S.r.l.: Insufficient legal basis for data processing
- Comune di Mazara del Vallo: Insufficient legal basis for data processing
- Lex Iuris S.r.l.: Insufficient legal basis for data processing
- HOLY MARY CATHOLIC SCHOOL, S.L.: Insufficient legal basis for data processing
- Bank: Non-compliance with general data processing principles
- Company: Insufficient legal basis for data processing
- Accountancy Firm: Insufficient legal basis for data processing
- Restaurant Partner Polska: Insufficient legal basis for data processing
- Ministero dell’Economia e delle Finanze: Insufficient legal basis for data processing
- HIGHCLIFFE ESTATES MARBELLA, S.L.: Insufficient legal basis for data processing
- ARES CAPITAL, S.A.: Insufficient legal basis for data processing
- RAMÓN GRAU, S.L.: Insufficient legal basis for data processing
- Hospital: Non-compliance with general data processing principles
- Advertising Agency: Insufficient legal basis for data processing
- Permanent TSB: Insufficient technical and organisational measures to ensure information security
- Liceo Scientifico Morgagni di Roma: Insufficient technical and organisational measures to ensure information security
- INPS – Istituto nazionale previdenza sociale: Insufficient technical and organisational measures to ensure information security
- Comune di Cassino: Insufficient legal basis for data processing
- Eni S.p.A.: Insufficient legal basis for data processing
- Piacenza Bar Association: Insufficient legal basis for data processing
- University of Szeged: Insufficient legal basis for data processing
- Elektronikus Egészségügyi Szolgáltatási Tér: Insufficient technical and organisational measures to ensure information security
- Technology Company: Insufficient legal basis for data processing
- Hungarian University of Agriculture and Life Sciences: Insufficient legal basis for data processing
- Obuda University: Insufficient legal basis for data processing
- Mediaworks Hungary Zrt.: Insufficient legal basis for data processing
- Elkjøp AS: Insufficient legal basis for data processing
- Blikk Kft.: Insufficient legal basis for data processing
- FTT allows appeal: NMC should have neither confirmed nor denied holding nurse's data
- EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- Pay or Consent Models in Europe: Already Outdated or an Overlooked Crisis in Freely Given Consent?
- Privacy vs. business convenience: the Mousse judgment and the future of data protection in the EU
- AKI (Estonia) - No. 2.1-1/24/397-890-38
- BGH - VI ZR 375/2
- VDAI fines medical company €450,000 for inadequate security measures in data breaches
- Reda Naujokaitienė: Insufficient legal basis for data processing
- Generative AI and data protection
- DSB (Austria) - 2026-0.016.479
- AEPD fines DIGI Telecom for issuing duplicate SIM to impersonator without consent
- Garante per la protezione dei dati personali (Italy) - 10192784
- APD/GBA (Belgium) - 11/2022
- Belgian DPA: Roularta Media Group violated cookie consent rules
- LG Rostock: Pre-ticked cookie consent boxes invalid under Art 6(1)(a) GDPR
- Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design
- AZOP (Croatia) - Decision 14-09-2023
- DPA need not assess law's constitutionality or GDPR proportionality, only legal basis
- Personvernnemnda (Norway) - 2018-14 (15/01355)
- Norwegian DPA: Legelisten.no may process healthcare reviews without prior consent
- Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR
- EDPB Annual Report 2025
- Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models
- Opinion 12/2024 on the draft decision of the French Supervisory Authority regarding the “Code of Conduct for Service Providers in Clinical Research” submitted by EUCROF
- Statement 2/2024 on the financial data access and payments package
- Report of the work undertaken by the ChatGPT Taskforce
- EDPB Annual Report 2023
- Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)
- Report of the work undertaken by the supervisory authorities within the 101 Taskforce
- EDPB Annual Report 2022
- EDPB Annual Report 2021
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
- Statement on the Digital Services Package and Data Strategy
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- Guidelines 01/2020 on processing personal data in the context of connected vehicles and mobility related applications
- EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research
- Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak
- Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects
- EDPB Work Programme 2019-2020
- WhatsApp Ireland Ltd v European Data Protection Board
- Integritetsskyddsmyndigheten v AB Storstockholms Lokaltrafik
- X v Russmedia Digital SRL and Inform Media Press SRL
- Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- IP v Quirin Privatbank AG
- European Parliament v TC
- L. H. v Ministerstvo zdravotnictví
- MK v K GmbH
- Nemzeti Adatvédelmi és Információszabadság Hatóság v UC
- Maximilian Schrems v Meta Platforms Ireland Limited
- Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens
- Agentsia po vpisvaniyata v OL
- HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others
- La Quadrature du Net and Others v Premier ministre and Ministère de la Culture
- Criminal proceedings against M.N
- RL v Landeshauptstadt Wiesbaden
- Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság
- Endemol Shine Finland Oy
- IAB Europe v Gegevensbeschermingsautoriteit
- BL v MediaMarktSaturn Hagen-Iserlohn GmbH
- Österreichische Datenschutzbehörde v WK
- État belge v Autorité de protection des données
- ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts
- UF and AB v Land Hessen
- OQ v Land Hessen
- RK v Ministerstvo zdravotnictví
- Proceedings brought by J.M
- European Commission v Republic of Poland
- Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v European Commission
- Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v European Commission
- UZ v Bundesrepublik Deutschland
- Hauptpersonalrat der Lehrerinnen und Lehrer beim Hessischen Kultusministerium v Minister des Hessischen Kultusministeriums
- Norra Stockholm Bygg AB v Per Nycander AB
- RW v Österreichische Post AG
- VS v Inspektor v Inspektorata kam Visshia sadeben savet
- TU and RE v Google LLC
- WhatsApp Ireland Ltd v European Data Protection Board
- Proximus NV v Gegevensbeschermingsautoriteit
- Bundesrepublik Deutschland v SpaceNet AG and Telekom Deutschland GmbH
- Digi Távközlési és Szolgáltató Kft. v Nemzeti Adatvédelmi és Információszabadság Hatóság
- OT v Vyriausioji tarnybinės etikos komisija
- Ligue des droits humains ASBL v Conseil des ministres
- Robert Roos and Others v European Parliament
- X and Z v Autoriteit Persoonsgegevens
- SIA 'SS' v Valsts ieņēmumu dienests
- Criminal proceedings against HP
- Mircom International Content Management & Consulting (M.I.C.M.) Limited v Telenet BVBA
- Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit
- État luxembourgeois v B and Others
- CJ v Court of Justice of the European Union
- Peter Puškár v Finančné riaditeľstvo Slovenskej republiky and Kriminálny úrad finančnej správy
- Tele2 Sverige AB v Post- och telestyrelsen and Secretary of State for the Home Department v Tom Watson and Others
- Verein für Konsumenteninformation v Amazon EU Sàrl
- Athanassios Oikonomopoulos v European Commission
- KPN BV v Autoriteit Consument en Markt (ACM)
- Ireland v European Parliament and Council of the European Union
- The Bavarian Lager Co. Ltd v Commission of the European Communities
- Commission of the European Communities v Kingdom of the Netherlands
- Criminal Offence and Health Condition Information as Special Categories of Data, and the Legal Aspects of Processing in Labor Relations under GDPR and Georgian Law
- DSB (Austria) - 2026-0.043.390
- NAIH (Hungary) - NAIH-11443-3/2026
- Hoge Raad - ECLI:NL:PHR:2023:935
- DSB (Austria) - 2025-0.950.759
- VwGH upholds annulment of €18M GDPR fine: DPA failed to attribute infringement to natural
- BGH - VI ZR 97/22
- Garante fines Lusha Systems Inc. over unauthorized B2B contact database
- Audiencia Nacional: appeal against AEPD €2 million fine on Amazon Flex criminal record
- DSB: Marketing agency's telephone recording of job applicants without valid consent
- Austrian FAC rules on publishing full court judgment naming witness on social media
- NAIH (Hungary) - NAIH-450-7-2026
- VwGH: Online platform may process hotel owner reviews under Art. 6(1)(f) legitimate
- DSB (Austria) - 2021-0.643.804
- BVwG - W211 2281442-1
- AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber
- NAIH (Hungary) - NAIH-4462-5-2026
- AEPD (Spain) - ps-00148-2025
- VG Berlin - 42 K 73/25
- SILVANERGIA 2022, S.L.: Insufficient legal basis for data processing
- Austrian DSB: Employee who shared customer's phone number acted as GDPR controller
- VG Berlin: DPA correctly found residential video surveillance for property protection
- Austrian DSB: Controller's use of social security number for statutory financial aid was
- Garante per la protezione dei dati personali (Italy) - 10269624
- Datatilsynet ordered Lab Pharma AS to erase influencer's personal data used after
- DSB: Retailer must grant full access and delete data after third-party fraud order
- DSB (Austria) - DSB-D124.5337
- UODO reprimands mayor for disclosing data subject's data to company without legal basis
- Finnish DPA examines anti-doping organization's GDPR compliance over public suspension
- Federal Administrative Court: retention of job applicant data for potential legal claims
- BVwG - W137 2334047-1
- VG Munich: university may be GDPR controller for professors' editorial work emails
- AEPD (Spain) - ps-00256-2025
- Montelibretti State Comprehensive School: Insufficient legal basis for data processing
- Persónuvernd (Iceland) - 2025010364
- BVwG - W292 2292202-1
- Medical Student: Insufficient legal basis for data processing
- OGH - 6Ob148/25w
- VG Hannover: Controller appeals DPA reprimand over unlawful workplace video surveillance
- BVwG - W292 2298015-1
- LAG Köln - 6 SLa 116/26
- BVwG - W298 2314952-1
- Action Fit di Milano: Non-compliance with general data processing principles
- Municipality of Mirabella Imbaccari: Insufficient legal basis for data processing
- Pietro d'Abano State Vocational School: Insufficient legal basis for data processing
- Municipality of Sciacca: Insufficient legal basis for data processing
- Cosmint S.p.A.: Non-compliance with general data processing principles
- University of Pisa: Insufficient technical and organisational measures to ensure information security
- Ancel Keys Comprehensive School Castelnuovo Cilento: Insufficient legal basis for data processing
- FTT upholds UKIPO's FOIA withholding of copyright exception documents under s.27
- European Commission v Hungary
- BVwG reduces DPA fine for undisclosed call recording from €25,500 to €22,000
- CJEU - C-458/25
- HDPA investigates Greek Infrastructure Ministry for SMS sent without consent or
- LG Frankfurt am Main - 2-06 O 234/25
- Persónuvernd: Icelandic Farmers’ Association breached GDPR by disclosing owner data to
- Monza and Brianza Local Education Authority: Insufficient legal basis for data processing
- Austrian DSB reprimands editor for failing to redact accused's name in social media posts
- Estonian DPA: website republishing public authority documents independently liable under
- Slovenian DPA: Controller breached Art. 32, 15 and 34 GDPR over data breach and access
- UODO fines controller PLN 31,507 for failing to provide information under Art. 58(1) GDPR
- Mediaworks Hungary Zrt.: Insufficient legal basis for data processing
- IndaNext Hungary Kft. (legal successor of Blikk Kft.): Insufficient legal basis for data processing
- BVwG - W252 2249249-1
- Comune di Aprilia: Insufficient legal basis for data processing
- Gambling operator: Insufficient legal basis for data processing
- Brussels Court of Appeal: €40,000 fine on INFOBEL for reselling telecom data without
- DSB (Austria) - 2026-0.483.002
- BVwG - W137 2334258-1/5E
- Icelandic DPA reprimands Landspitali employee for unauthorized medical record searches
- Proceedings brought by B
- Orange Romania SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- European Commission v Federal Republic of Germany
- Productores de Música de España (Promusicae) v Telefónica de España SAU
- European Parliament v Council of the European Union (C-317/04) and Commission of the European Communities (C-318/04)
Related across sources
C-13/16 Valsts policijas Rīgas reģiona pārvaldes Kārtības policijas pārvalde v Rīgas pašvaldības SIA "Rīgas satiksme" In Case C-13/16, the Court of Justice of the European Union (Second Chamber) addressed a preliminary ruling from the Latvian Supreme Court in proceedings between the Riga Regional… CJEU ·Second Chamber May 4, 2017 Legitimate Interest Personal Data Lawful Basis
C-73/16 Peter Puškár v Finančné riaditeľstvo Slovenskej republiky and Kriminálny úrad finančnej správy In Case C-73/16, the Court of Justice of the European Union addressed a preliminary reference from the Slovak Supreme Court concerning Peter Puškár's challenge to his inclusion on… CJEU ·Second Chamber Sep 27, 2017 GDPR Article 5 Principles of Processing Personal Data Legitimate Interest
C-362/14 Maximillian Schrems v Data Protection Commissioner C-362/14 (Schrems I) CJEU Oct 6, 2015 Privacy Shield International Transfer Supervision
C-40/17 Fashion ID GmbH & Co. KG v Verbraucherzentrale NRW eV C-40/17 (Fashion ID) CJEU Jul 29, 2019 Controllers Legitimate Interest Integrity and Confidentiality Principle
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines ·EDPB May 25, 2018 Privacy Shield Legitimate Interest Processing Agreement
W137 2333649-1 Federal Administrative Court: retention of job applicant data for potential legal claims The data subject applied for a job with the association and provided additional documents, regarding the use of their personal data. Among other things, it was stated that the… Jul 8, 2026 Storage Limitation Personal Data Right to be Forgotten