⚠️ Access request not handled in time!
🚨🇮🇹 Hard Drive Failure + Ignored Access Request = €2,000 Fine for Tirrenia Hospital Srl 🚑💾 Regulator: GPDP (Italian DPA)Decision: 1...
Read more🔒 HR & Facebook
HR teams: stop mining employees’ Facebook posts. 🔎 Autostrade per l’Italia fined €420,000 for… “screening” an employee’s Facebook 🇮🇹 Regulator: GPDP ...
Read more📚 TOS update
🚚📦 WeTransfer: when a simple TOS update raises an GDPR tsunami On 15 July, WeTransfer discreetly slipped the following statement into its new TOS: ‘W...
Read morePoland: erroneous risk analysis
🔗 Cybersecurity ≠ Protection of rights & freedoms: the error that costs Białystok paediatric hospital fined PLN 66,500 / ~€15,000 🇵🇱 UODO sanction :...
Read more📢 Spain, excessive data collection!
📢 Do you work in the hotel industry 🇪🇸? Is your privacy policy really up to date? 👁️ If you go to a hotel in Spain 🇪🇸 Expect to fill in a form with 4...
Read more🇸🇪 Sweden: breathalyser tests
🛳️🫧 When daily breath tests sink GDPR compliance: the WÅAB case (Sweden) Regulator: IMY (Swedish DPA)Source: IMY-2024-1520, 18 June 2025 🔍 The facts...
Read more🚦 Penalty: vulnerabilities identified by unpatched pentests
🚨 Spain, a French supermarket chain sanctioned: For failing to correct all the flaws identified by the pentests. Regulator : AEPD Source : ps-00128-2...
Read more⌛ Delay in processing requests for access rights
🔍 When emails sent to the DPO are identified as SPAM! Regulator: CNPD, Luxembourg Source: Deliberation no. 1FR/2025 of 6 January 2025 🚦 Response tim...
Read more🇫🇷 Penalty amounts
⚖️ 1. CNIL Penalties📝 No obligation to reveal how fines are calculated“The CNIL must state the legal and factual grounds for a sanction, but it is not...
Read more🇮🇹 OPT-OUT / Penalty
🇮🇹 Italy - 🏠 Estate agency penalised for unwanted calls 🔔 A reminder: a single complaint can trigger an inspection! Regulator: Il Garante (GPDP) Sour...
Read moreVideo surveillance: Use without authorization
Source : PS 0345-2024 🎯 Context: A supermarket customer complains about a refund error. An employee shows her the CCTV footage captured on her mobil...
Read more📣 A lack of confidentiality
🔎 Confidentiality broken in an internal investigation protocol = €120,000 fine. Source: PS 0505-2024 The Spanish regulator, AEPD has fined a company...
Read more