CJEU delivers a new ruling on the meaning of controllerToday, 11 January 2024, the Court of Justice of the European Union (CJEU) delivered its judgment in …
The EU Data Act enters into force11 January 2024 is the date of entry into force of the the Regulation (EU) 2023/2854 on harmonised r…
The Romanian DPA fines shopping center EUR 3,000 for failure to implement adequate security measuresOn 11 December 2023, the Romanian DPA announced a fine of EUR 3,000 imposed on a controller in the r…
EU negotiators reach a provisional agreement on the Artificial Intelligence ActOn 8 December, late at night, the negotiators from the EU Parliament and the EU Council reached a pr…
The Romanian DPA fines online lending platform EUR 24,000 for GDPR violations: No security measures, data breach notification, nor response to a data subject’s requestOn 7 December 2023, the Romanian DPA announced that it had imposed three sanctions totaling EUR 24,0…
CJEU delivers first major ruling on Automated Decision MakingToday, 7 December 2023, the Court of Justice of the European Union (CJEU) delivered its judgment in …
CJEU confirms that GDPR fines are conditional on the penalized conduct being intentional or negligentOn 5 December 2023, the Court of Justice of the European Union (CJEU) issued its judgment in the Deu…
e-Privacy and GDPR non-compliance: Romanian DPA fines a fitness company EUR 2,000 and issues two reprimandsOn 23 November 2023, the Romanian DPA announced that it had sanctioned a fitness company with a EUR …
The Romanian DPA fines a controller in the banking sector EUR 1,500 for failure to implement the previously imposed corrective measure on handling an access requestOn 20 November 2023, the Romanian DPA announced a fine of EUR 1,500 applied to a controller in a ban…
Petroleum company faces a substantial fine of EUR 110,000 from the Romanian DPA following multiple data breachesOn 13 November 2023, the Romanian DPA announced a fine of EUR 110,000 imposed on a petroleum company…