Content type · 8 documents

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

🇪🇺 EU 🇳🇱 NL
Enforcement dashboard — fines by country, authority and article →
Country: Portugal (8) Clear filter
Filter by Topic Supervisory Authorities3518 Processing Agreement2798 Processing2594 Personal Data2548 Controllers2165 Data Controller1854 Law Enforcement1541 IP Address1278 Security1007 Supervision854 Monitoring523 Consent498
CNPD · €180,000 Setúbal municipality: Non-compliance with general data processing principles The Portuguese DPA has imposed a fine of EUR 170,000 on Setúbal municipality. The DPA found data protection violations regarding the collection of personal data from Ukrainian… Public Authority Processing Agreement Personal Data Nov 2, 2022
CNPD · €4,300,000 Portuguese National Statistical Institute: Non-compliance with general data processing principles The Portuguese DPA has fined the Portuguese National Statistical Institute EUR 4,3 million. The DPA found numerous violations of the GPDR in connection with the 2021 census in… DPIA Privacy Shield Privacy Impact Assessment Nov 2, 2022
CNPD · €1,250,000 Lisbon City Council: Insufficient legal basis for data processing The Portuguese DPA has imposed a fine of EUR 1.25 million on the Lisbon City Council. The fine is the sum of 225 fines from various violations committed by the municipality since… Religious Beliefs DPIA Fines Dec 21, 2021
Portugal CNPD (Portugal) - Deliberação 2019/494 Facts — In its Opinion 20/2018 concerning the draft of Law 58/2019 which ensures the implementation of the GDPR in the portuguese national legal framework, the DPA drew the… Controllers Processing Personal Data Sep 3, 2019
CNPD · €2,000 PORTUGAL DPA: Insufficient fulfilment of information obligations Inexistence of signalization regarding the use of CCTV systems Video Surveillance Corrective Actions and Duty of Information Framework Processing Agreement Mar 25, 2019
CNPD · €2,000 PORTUGAL DPA: Insufficient fulfilment of information obligations Inexistence of signalization regarding the use of CCTV systems Video Surveillance Corrective Actions and Duty of Information Framework Processing Agreement Mar 19, 2019
CNPD · €20,000 PORTUGAL DPA: Insufficient fulfilment of data subjects rights Denial of the right to access recorded phone calls by the Data Subject Personal Data Data Subject Rights Exercise Modalities and Procedures Processing Agreement Feb 5, 2019
CNPD · €400,000 Public Hospital: Insufficient technical and organisational measures to ensure information security Investigation revealed that the hospital’s staff, psychologists, dietitians and other professionals had access to patient data through false profiles. The profile management… Health Data Healthcare Healthcare Jul 17, 2018