Italy: bank fined €1m and rental company €250k for unclear DPAg and no legal basis
paid
–
4 min read
The 🇮🇹 Garante fined a bank €1 million for anti-fraud checks as a processor on behalf of a group company without a legal basis, breaching both Articles 28(3) and 5(1)(a). The rental company was separately fined €250,000, also for an insufficient privacy notice. Here are your key takeaways! 💡
EDPB Guidelines 1/2022 Right of access
paid
–
3 min read
A snapshot of the EDPB Guidelines dealing with DSARs: Brief overview, key points, and some advice for data protection pros.
Right to object and right to erasure: insights from OSS decisions
paid
–
2 min read
EDPB SPE project: Article 60 One-Stop-Shop thematic case digest analysing Articles 17 and 21. Key takeaway: Create, document, implement and control policies and procedures, including complaints management. PS: The 'data subject journey' is your secret weapon!
Sweden Supreme Adm. Court: IMY's decision not to investigate or act on complaints can be appealed
paid
–
3 min read
IMY's decisions 1) not to investigate a complaint further and 2) to close a supervisory case without action are appealable.