CJEU delivers first major ruling on Automated Decision MakingToday, 7 December 2023, the Court of Justice of the European Union (CJEU) delivered its judgment in …
CJEU confirms that GDPR fines are conditional on the penalized conduct being intentional or negligentOn 5 December 2023, the Court of Justice of the European Union (CJEU) issued its judgment in the Deu…
e-Privacy and GDPR non-compliance: Romanian DPA fines a fitness company EUR 2,000 and issues two reprimandsOn 23 November 2023, the Romanian DPA announced that it had sanctioned a fitness company with a EUR …
The Romanian DPA fines a controller in the banking sector EUR 1,500 for failure to implement the previously imposed corrective measure on handling an access requestOn 20 November 2023, the Romanian DPA announced a fine of EUR 1,500 applied to a controller in a ban…
Petroleum company faces a substantial fine of EUR 110,000 from the Romanian DPA following multiple data breachesOn 13 November 2023, the Romanian DPA announced a fine of EUR 110,000 imposed on a petroleum company…
The Romanian DPA fines a bank EUR 3,000 and issues a warning following a data breachOn 3 November 2023, the Romanian DPA announced a fine of EUR 3,000 imposed on a bank for violation o…
Does a patient have the right to obtain a copy of the medical records free of charge? Today, the CJEU makes it clear.On 26 October 2023 an interesting case from the perspective of the scope of the right of access was …
A new EUR 1,000 fine issued by the Romanian DPA for direct marketing violationsOn 20 October 2023, the Romanian DPA announced a fine of EUR 1,000 imposed on a major retailer due t…
The Romanian DPA fines an online retailer EUR 3,000 following data breachOn 24 October 2023, the Romanian DPA announced a fine of EUR 3,000 applied to an online retailer for…
CJEU delivers judgment on the notion of “processing” in the context of COVID-19 mobile appsOn 5 October, the Court of Justice of the European Union (CJEU) delivered its ruling in Case C-659/2…