DPA decision

75 posts

Latest posts

Sweden MedHelp 1177 case

Sweden MedHelp 1177 case

members – 8 min read

This case is not only a goldmine for DPOs in the Swedish healthcare sector (although particularly so), but DPOs in general, for assessing roles, legal bases and processor liability.

Feb 22, 2024

Sweden court upholds ~$1m fine: major health data leak and forwarding calls to 🇹🇭

members – 2 min read

🇸🇪 MedHelp must pay SEK 11,3 million (~$1m) for leaking 2,7 million health-related conversations (of 170 000 hours) online for several years and no legal basis for forwarding call to Thailand.

Feb 18, 2024

Denmark DPA reports controller to police and suggests DKK 1,5 m fine

Denmark DPA reports controller to police and suggests DKK 1,5 m fine

members – 2 min read

💸 DKK 1,5m and reported to the police for not auditing their processors for 𝒚𝒆𝒂𝒓𝒔, violating the accountability principle.

Feb 1, 2024

Denmark DPA orders municipalities to ensure Google-sharing compliance

Denmark DPA orders municipalities to ensure Google-sharing compliance

members – 1 min read

🔥 Danish DPA with new decision in their Helsingørgate/Chromebook case!

Jan 30, 2024

Sweden DPA fines municipality for lack of Google Workspace DPIA

members – 2 min read

Sweden's DPA IMY fines a municipality SEK 300,000 for using Google Workspace for Education without a DPIA.

Nov 30, 2023

Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed

Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed

members – 3 min read

IMY's decisions 1) not to investigate a complaint further and 2) to close a supervisory case without action are appealable.

Nov 20, 2023

Denmark DPA strongly criticises and bans public agency processing

Denmark DPA strongly criticises and bans public agency processing

members – 3 min read

The Danish Agency for Digital Government processes personal data of 2.26 million citizens in violation of the data minimisation principle.

Nov 18, 2023

Norway Privacy Appeals Board requires the DPA to investigate lawfulness

Norway Privacy Appeals Board requires the DPA to investigate lawfulness

members – 2 min read

💡 A DPA cannot freely decide which cases to investigate or not.

Nov 13, 2023

Denmark DPA criticises processor for poor security

members – 2 min read

…

Nov 13, 2023

The EDPB extends the Meta ban to the entire EEA permanently

The EDPB extends the Meta ban to the entire EEA permanently

members – 2 min read

The EDPB makes the Norwegian DPA's ban on Meta's behavioural advertising on Facebook and Instagram permanent and extends it to the entire EEA

Oct 31, 2023

Denmark DPA fine for using Google and Meta cookies illegally

members – 1 min read

…

Oct 6, 2023

Success! Your account is fully activated, you now have access to all content.

Success! Your billing info has been updated.

Your billing was not updated.