New CJEU ruling on non-material damage compensation under GDPRToday, 11 April 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in ca…
The Cluj Tribunal orders the replacement of a EUR 5,000 GDPR fine with a warning On 5 April 2024, the Cluj Tribunal delivered its ruling in a case concerning a challenge a…
AI Act Essentials: Timeline For all the blog posts on AI topic, you can access our AI Corner (available here).
CJEU rules that a DPA can order the erasure of unlawfully processed data even in the absence of a request from a data subject exercising the right to be forgottenOn 14 March 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in Case C…
The Artificial Intelligence Act voted by the EU ParliamentThe Artificial Intelligence Act (AI Act) continues its path towards final adoption. The draft reg…
What constitutes personal data under the GDPR? Does the new CJEU ruling clarify it?Today, 7 March 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in the…
CJEU rules that oral communications of personal data may constitute “processing” according to GDPR under certain conditionsOn 7 March 2024, the Court of Justice of the European Union (CJEU) delivered its judgement in Case C…
Comminatory fine applied to one of Bucharest’s districts for failing to respond to the requestsAfter the Romanian DPA announced on 31 January 2024 that it fined one of Bucharest’s districts, the …
New AG opinion on the sale of a database containing personal data in the context of enforcement proceedingsOn 22 February 2024, the Advocate General (AG) of the Court of Justice of the European Union (CJEU) …
The Romanian DPA sanctions an exchange office for non-compliance with the lawfulness, fairness, and transparency principle and for failure to provide the information requested during an investigationOn 7 February 2024, the Romanian DPA announced a fine of EUR 2,000 imposed on an exchange office for…