DPA decision - DPO Hub

Denmark Google Workspace for Education Chromebook case (Helsingørgate)

members – 9 min read

[15 July: Municipalities complies with Jan order + 🚨 DPA asks for EDPB opinion on the scope of a controller's documentation obligations regarding a processor's use of sub-processors] The Danish DPA's landmark decision of 2022 to ban certain use of Google products and US transfers, is still ongoing.

Jul 15, 2024

Spain: Massive €160k fine for ignoring the DPA

members – 1 min read

🇪🇸 Watium ignored the DPA (several times), was fined €160,000, but got a 40% discount for acknowledging responsibility and agreeing to pay voluntary. 💡 Make it a habit to respond promptly both to DPAs and data subjects! (And please reach out if you have answers to my questions.)

May 28, 2024

Record GDPR fine from Norway (NAV)

members – 5 min read

Norway's DPA upheld their record NOK 20m fine to the Labour and Welfare Administration (NAV) for several, grave violations.

Apr 11, 2024

Denmark DPA says cookie walls are legal - and not

members – 2 min read

Update 26 Mar 2024: the DPA rejects reopening the cases, upholding that analytics/statistics aren't a necessary part of the alternative to paid access.

Mar 26, 2024

Sweden MedHelp 1177 case

members – 8 min read

This case is not only a goldmine for DPOs in the Swedish healthcare sector (although particularly so), but DPOs in general, for assessing roles, legal bases and processor liability.

Feb 22, 2024

Sweden court upholds ~$1m fine: major health data leak and forwarding calls to 🇹🇭

members – 2 min read

🇸🇪 MedHelp must pay SEK 11,3 million (~$1m) for leaking 2,7 million health-related conversations (of 170 000 hours) online for several years and no legal basis for forwarding call to Thailand.

Feb 18, 2024