IN THE SPOTLIGHT

Irish Data Protection Authority sanctions Meta with the largest GDPR fine to date
Yesterday it was announced that the Irish Data Protection Authority (Irish DPA) imposed a fine of EUR 1.2 billion to Meta Platforms Ireland Limited (Meta). The sanction was applied in connection wi…

The Romanian DPA fines a bank a total amount of EUR 11,000 for failure to ensure the right of access and certain transparency requirements
On 11 May 2023, the Romanian DPA announced two fines of (i) EUR 1,000 for infringement of Art. 12 para. (4) in conjunction with Art. 15 para. (3) of the GDPR, and (ii) EUR 10,000 for infringement of A…

CJEU delivers judgment on non-material damage resulting from the unlawful processing of data
On 4 May 2023, the Court of Justice of the European Union (“CJEU”) delivered its ruling in Case C-300/21 (Österreichische Post AG – non-material damage resulting from unlawful processing of data). …

CJEU delivers judgment on the right of access
On 4 May 2023, the Court of Justice of the European Union (“CJEU”) delivered its judgment in Case C-487/21 (Österreichische Datenschutzbehörde and CRIF). The background of this case: The appli…

The Romanian DPA releases 2019-2023 overview of relevant judicial practice developments
On 2 May 2023, the Romanian DPA published a synthetic presentation of the 2019-2023 judicial proceedings in which the DPA is involved. In a nutshell, this overview covers 127 court cases initiated …

EDPB launches Data Protection Guide for small business
On 27 April 2023, the European Data Protection Board (EDPB) published a Data Protection Guide (Guide) to help small business owners in their process of compliance with data protection requirements und…