The Romanian DPA fines a controller in the medical sector EUR 2,000 for not respecting the right of access
On 3 August 2023, the Romanian DPA announced a fine of EUR 2,000 applied to a controller in the medi…
Another controller in the banking sector sanctioned EUR 3,000 by the Romanian DPA for violating GDPR requirements on personal data security
On 18 July 2023, the Romanian DPA announced a fine of EUR 3,000 applied to a controller in the banki…
The Romanian DPA’s considerations related to the use of WhatsApp maintained by the Bucharest Tribunal in the first instance
On 10 July 2023, the Romanian DPA announced that the Bucharest Tribunal, in the first instance, main…
EU-US Data Privacy Framework adopted
On 10 July 2023, the European Commission adopted its adequacy decision for the EU-US Data Privacy Fr…
The EDPB template complaint and acknowledgment of receipt forms, and the final version of Recommendations on the application for approval and on the elements and principles to be found in Controller BCRs are now available
During its latest plenary, on 20 June 2023, the EDPB adopted a Template Complaint Form and a Templat…
Romanian DPA orders ANPC to stop using body cameras during inspections and delete personal data
On 5 July 2023, the Romanian DPA announced that it had issued a warning to Autoritatea Nationala pen…
![AdobeStock_469644365 [Converted]](https://privacyoutloud.ro/wp-content/uploads/2022/10/AdobeStock_469644365-Converted-710x355.jpg)
CJEU delivers its judgment in the Meta Platforms case
Today, 04 July, 2023, the Court of Justice of the European Union (“CJEU”) delivered its ruling in Ca…
Balancing security and privacy: CJEU Advocate General Medina’s perspective on storing fingerprints in ID cards
On 29 June 2023, Advocate General (“AG”) Laila Medina released her opinion in case C-61/22 (RL v Lan…
CJEU delivers judgment on data subjects’ right to know the date of and the reasons for the consultation of their personal data
On 22 June 2023, the Court of Justice of the European Union (“CJEU”) delivered its ruling in Case C …
The CNIL fines a company specialized in online advertising EUR 40M over several GDPR violations, including consent requirements
On 22 June 2023, the French DPA (“CNIL”) announced the EUR 40M sanction issued on 15 June 2023 again…
