News

Video surveillance: Use without authorization

Biometrics & Video Surveillance, Confidentiality & Security | 05/05/2025

Source : PS 0345-2024 ๐ŸŽฏ Context: A supermarket customer complains about a refund error. An employee shows her the CCTV footage captured on her mobil...

Read more

๐Ÿ“ฃ A lack of confidentiality

Confidentiality & Security | 28/04/2025

๐Ÿ”Ž Confidentiality broken in an internal investigation protocol = €120,000 fine. Source: PS 0505-2024 The Spanish regulator, AEPD has fined a company...

Read more

๐Ÿฆ Bank and Access

Confidentiality & Security | 08/04/2025

Source : PS/00477/2023 ·       A bank allowed unauthorized access to a joint bank account by a third party (the mother of one of the holders), withou...

Read more

๐Ÿ“Œ Data Deletion Not Effectively Implemented

Legal basis | 08/04/2025

๐Ÿ“œ Data Blocking and Deletion : Breach of Article 32 of the LOPDGDD Source :PS-00176-2024   The AEPD imposed a €20,000 fine (reduced to €16,000 for e...

Read more

๐ŸŠCookies and Commercial Prospecting ๐Ÿ‡ซ๐Ÿ‡ท

Cookies & Trackers | 04/04/2025

๐Ÿ“ฑ๐Ÿช €50 Million Fine for a French Telecom Operator ๐Ÿ“ฑ๐Ÿช On November 14, 2024, the CNIL imposed a €50 million fine on a French telecom operator for displ...

Read more

๐Ÿ“ข๐Ÿ‡ต๐Ÿ‡ฑ Public sector and DPO

DPO | 30/03/2025

๐Ÿ“ข No DPO? No excuse Source: DKN.5131.7.2024 Poland, UODO ๐Ÿ” On February 6, 2025, the Polish data protection authority, UODO, fined a public company, t...

Read more

๐Ÿ’ฅ Intrusive surveillance of employees

Data Subject Rights, Retention & Minimisation | 30/03/2025

Source : 10096474, Italy, Il garante per la protezione dei dati ๐Ÿ” When access to employees' computers turns into widespread surveillance... and cost...

Read more

๐Ÿ”Ž๐Ÿ‡ณ๐Ÿ‡ด DPO and insufficient resources

DPO | 30/03/2025

๐Ÿ“Œ €351,000 fine for a telecommunications company (Norway) ๐Ÿ“† March 2025 ๐Ÿ“š Articles violated: 24, 37, 38 and 39 of the GDPR. Source : 21-03823-45 Foll...

Read more

๐Ÿ‡ฌ๐Ÿ‡ท Health data and online publication

Data Subject Rights, Legal basis | 30/03/2025

๐Ÿ“ธ Doctor: Publication of post-op photos of a former patient... Source : N°50-2024 Greece ๐Ÿ’ฅ The Hellenic Data Protection Authority has issued an ex...

Read more

๐Ÿ‡ซ๐Ÿ‡ฎ Costly negligence and security

Confidentiality & Security | 30/03/2025

๐Ÿ” Personal data & security  A loan comparator ๐Ÿ“… On December 17, 2024, the Finnish Data Protection Authority fined a loan comparator €950,000 for secu...

Read more

๐Ÿ“ข GDPR & Rental

Retention & Minimisation, Confidentiality & Security | 30/03/2025

โŒ No ID documents via WhatsApp or Email When a rental company requests ID documents via WhatsApp — including that of a minor! Source: PS 00175-2023S...

Read more

๐Ÿ‡ช๐Ÿ‡ธ Abusive communication and GDPR

Data Subject Rights | 30/03/2025

๐Ÿ“ข GDPR fine for misuse of professional email addresses Source: PS/00117/2022Spain, AEPD A €2,000 fine was imposed by the AEPD on a works council memb...

Read more

Explore all our areas of expertise: