Skip to content

Topics Laws Case law Enforcement Guidance News

More

Topics Laws Case law Enforcement Guidance News

More sources

Literature Academic articles and books Tools Templates, checklists, calculators

Overviews

This week Everything added in the last 7 days Enforcement dashboard Fines by country, authority and article Coverage What the collection holds, and how current

Work with it

Transit Your processing register as a metro map API & AI tools REST, MCP server, context files Alerts & account Follow topics, get digests

About overview.legal Classic layout

Contents

Enforcement · Spanish Data Protection Authority (aepd)

23ANDME, INC: Insufficient technical and organisational measures to ensure information security

decided Jul 16, 2026aepd.es ↗

Export

Context for an AI assistant (.md) Cited markdown to paste into your AI assistant. Contains this document’s text, its sections with their topics, and the full text of every law provision it applies.

Where it stands · topics

Where it stands

Standing: Not cited by any decision here yet

Documents

Art. 5(1)
Art. 33
Art. 5(1)(f)
Art. 5

personal data breach notification under GDPR Guidelines 9/2022 · Guidance · Apr 4, 2023
restrictions under Article 23 GDPR Guidelines 10/2020 · Guidance · Oct 13, 2021
VB v Natsionalna agentsia za prihodite C-340/21 · Case Law · Dec 14, 2023
UZ v Bundesrepublik Deutschland C-60/22 · Case Law · May 4, 2023
Europrivacy criteria of certification regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 (GDPR) Opinion 28/2022 · Guidance · Oct 10, 2022
calculation of administrative fines under the GDPR Guidelines 04/2022 · Guidance · May 24, 2023