DPO Hub
  • Home
  • Topics
  • Filter
  • EDPB
  • CJEU
  • Bookmarks
  • Community ↗️
Sign in Sign up
Sign up Sign in
  • Home
  • Topics
  • Filter
  • EDPB
  • CJEU
  • Bookmarks
  • Community ↗️
  • Terms
  • Privacy
  • Archive (all posts)
  • GDPR.Fan ↗️
  • Manage subscription
Unlock full access to see the entire library by subscribing to a paid plan.
Sign up
Bookmarks

DPA decision

75 posts
UK ICO fines Clearview AI €8.9m and orders stop in processing
DPA decision ICO AI

UK ICO fines Clearview AI €8.9m and orders stop in processing

members – 2 min read
And on 8 Oct 2025, the 🇬🇧 Upper Tribunal (appeal court) upheld three of Information Commissioner’s four grounds of appeal, sending the case back to the lower appeal court.
Oct 12, 2025
Rie Aleksandra Rie Aleksandra
Norway DPA fines the Labour and Welfare Administration (NAV) NOK 20 million
DPA decision public sector fine

Norway DPA fines the Labour and Welfare Administration (NAV) NOK 20 million

members – 6 min read
[updated] After the Privacy Appeals Board overturned substantial parts of the DPA's decision against the Labour and Welfare Administration (NAV), including the record NOK 20 million fine, the DPA has decided to reassess the case.
Oct 1, 2025
Rie Aleksandra Rie Aleksandra
Norway DPA fines Telenor ASA NOK 4 million for DPO violations
DPA decision fine DPOs

Norway DPA fines Telenor ASA NOK 4 million for DPO violations

members – 9 min read
[updated] After initially flagging a potential NOK 99m (~€8.3m) fine, Datatilsynet fined Telenor ASA NOK 4m (~€351,000) for failing to properly assess and document the DPO role (independence, conflicts of interest, reporting lines) – the case is now with the 🇳🇴 Privacy Appeals Board.
Sep 29, 2025
Rie Aleksandra Rie Aleksandra
🇮🇪 DPC fines TikTok €530m for China transfers
DPA decision fine transfers

🇮🇪 DPC fines TikTok €530m for China transfers

members – 3 min read
10 July: DPC launches new investigation into China transfers. Earlier: transparency breach by failing to disclose the third countries involved and didn't explain the nature of the transfers in its privacy policy --> get compliant in six months or stop the transfers (but order paused until Oct).
Jul 22, 2025
Rie Aleksandra Rie Aleksandra
🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising ('BA & TA')
DPA decision fine principles

🇮🇪 DPC fines LinkedIn €310m for illegal behavioural analysis and targeted advertising ('BA & TA')

members – 7 min read
Key takaways: Lack of lawful basis = loss of control = 'significant damage', lawful bases are notoriously tricky to get right, and most have lots to gain in improving information and transparency. Full decision = a key lesson on legitimate interest and LIAs.
Jan 22, 2025
Rie Aleksandra Rie Aleksandra
🇮🇪 DPC fines Meta €91m for failing to safeguard passwords and notify breaches
DPA decision Meta fine

🇮🇪 DPC fines Meta €91m for failing to safeguard passwords and notify breaches

members – 1 min read
UPDATE 1 Jan: Summary + full decision published! The DPC fines Meta for failing to safeguard users' passwords (storing them in plaintext!) and for notifying the breach too late.
Dec 30, 2024
Rie Aleksandra Rie Aleksandra
noyb win: 🇳🇱 Dutch DPA fines Netflix €4.75m for lack of information
DPA decision fine DSAR

noyb win: 🇳🇱 Dutch DPA fines Netflix €4.75m for lack of information

members – 1 min read
noyb gets their first big win in their streaming services complaint project, filed in January 2019 against Amazon Prime, Apple Music, DAZN, Flimmit, Netflix, SoundCloud, Spotify and YouTube. Unsurprisingly, Netflix has already objected.
Dec 19, 2024
Rie Aleksandra Rie Aleksandra
🇮🇪 DPC fines Meta €251m for failing on data protection by design and default and breach handling
DPA decision Meta fine

🇮🇪 DPC fines Meta €251m for failing on data protection by design and default and breach handling

members – 1 min read
Meta failed to properly notify and document a breach affecting 3m EEA Facebook users and to build in data protection requirements throughout the design and development cycle.
Dec 18, 2024
Rie Aleksandra Rie Aleksandra
Norway DPA fines university for insufficient access control in MS Teams
DPA decision fine breaches

Norway DPA fines university for insufficient access control in MS Teams

members – 4 min read
The 🇳🇴 University of Agder was fined €12,500 (NOK 150k) for failing to secure personal data on Teams/SharePoint and insufficient internal controls. Short decision, several takeaways for everyone!
Sep 12, 2024
Rie Aleksandra Rie Aleksandra
Dutch DPA fines Clearview AI €30.5m, warns personal liability and says *use* also illegal
DPA decision fine

Dutch DPA fines Clearview AI €30.5m, warns personal liability and says *use* also illegal

members – 4 min read
[📝 NB! Massive post update 11 Sep] The 🇳🇱 DPA fines Clearview €30.5m, imposes four orders and warns of non-compliance penalties of €5.1m. Using Clearview is illegal and the DPA investigates if company directors can be held personally liable for the violations. Numerous questions on this decision!
Sep 11, 2024
Rie Aleksandra Rie Aleksandra
Italy: bank fined €1m and rental company €250k for unclear DPAg and no legal basis
DPA decision fine rights

Italy: bank fined €1m and rental company €250k for unclear DPAg and no legal basis

members – 4 min read
The 🇮🇹 Garante fined a bank €1 million for anti-fraud checks as a processor on behalf of a group company without a legal basis, breaching both Articles 28(3) and 5(1)(a). The rental company was separately fined €250,000, also for an insufficient privacy notice. Here are your key takeaways! 💡
Aug 21, 2024
Rie Aleksandra Rie Aleksandra
Denmark Google Workspace for Education Chromebook case (Helsingørgate)
DPA decision principles data minimisation

Denmark Google Workspace for Education Chromebook case (Helsingørgate)

members – 9 min read
[15 July: Municipalities complies with Jan order + 🚨 DPA asks for EDPB opinion on the scope of a controller's documentation obligations regarding a processor's use of sub-processors] The Danish DPA's landmark decision of 2022 to ban certain use of Google products and US transfers, is still ongoing.
Jul 15, 2024
Rie Aleksandra Rie Aleksandra
Ready to get started now?
Subscribe to get access to premium content or contact us if you have any questions.
Subscribe Contact us
DPO Hub
☕️ Where GDPR pros come to save time and sanity
Navigation
  • Home
  • Topics
  • Filter
  • EDPB
  • CJEU
  • Bookmarks
  • Community ↗️
Quick links
  • Terms
  • Privacy
  • Archive (all posts)
  • GDPR.Fan ↗️
  • Manage subscription
Tags
CJEU EDPB DPA decision fine lawfulness
©2025 DPO Hub - Made with 💛 in 🇳🇴
Great! Next, complete checkout for full access to DPO Hub.
Welcome back! You've successfully signed in.
You've successfully subscribed to DPO Hub.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.