Enforcement·Spanish Data Protection Authority (aepd)EN
Export
23ANDME, INC: Insufficient technical and organisational measures to ensure information security
The Spanish Data Protection Authority (AEPD) fined 23andMe, Inc.
StatusNot cited by any decision here yet
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
References
Related across sources
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Apr 4, 2023 Notification Obligation Data Breaches Personal Data
Guidelines 10/2020 restrictions under Article 23 GDPR Guidelines ·EDPB Oct 13, 2021 Accuracy Personal Data Right to Restriction
C-340/21 VB v Natsionalna agentsia za prihodite C-340/21 (VB v Natsionalna agentsia) CJEU Dec 14, 2023 Data Breaches Integrity and Confidentiality Principle Notification Obligation
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Records of processing activities
Opinion 28/2022 Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion ·EDPB Oct 10, 2022 Certification Privacy by Design & Default Controllers
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB May 24, 2023 Fines Prior Consultation GDPR Article 5 Principles of Processing