Category

Legal basis for processing
The Belgian supervisory authority (APD) recently decided that the information about teachers’ participation in a strike is not a special category of data, because it does not amount to data...
Read More
On 11 January 2023, the Italian data protection authority (“Garante“) issued a decision against Commify Italia Srl for several violations of the GDPR. The decision demonstrates that the lawfulness of...
Read More
On 6 February 2023 the Norwegian Data Protection Authority (“Datatilsynet“) issued an administrative fine in the amount of approx. EUR 860,000 against the Norwegian fitness company SATS ASA (“SATS“), for...
Read More
Two recent decisions of the Italian data protection authority (Garante), one from January 2023 and the other from February 2023, lay down basic principles that the data controllers should follow...
Read More
On 17 June, the UK government introduced in the House of Commons the Data Protection and Digital Information Bill, a 192-page document containing numerous amendments to the country’s data protection...
Read More
On 1 April 2022, the Belgian DPA rendered a decision against an employer for restoring in an indiscriminate manner personal data on a former employee’s work laptop. The facts The...
Read More
In a recent decision, the Spanish Data Protection Authority (Agencia Española de Protección de Datos – “AEPD“) fined Marins Playa, S.A. (“Marins Playa“), a provider of hotel services, with 30,000...
Read More
On 11 February 2022, the Spanish Data Protection Authority (Agencia Española de Protección de Datos) fined Amazon Road Transport Spain, S.L. (“Amazon RT“) EUR 2,000,000, for including criminal record certificates...
Read More
On 9 November 2020 Belgian Data Protection Authority (“APD“) rendered a decision confirming that the employee’s consent can be a valid ground for processing under certain conditions. The decision by...
Read More

ARCHIVE