🇮🇹 OPT-OUT / Penalty
🇮🇹 Italy - 🏠 Estate agency penalised for unwanted calls 🔔 A reminder: a single complaint can trigger an inspection! Regulator: Il Garante (GPDP) Sour...
Read more⌛ Delay in processing requests for access rights
🔍 When emails sent to the DPO are identified as SPAM! Regulator: CNPD, Luxembourg Source: Deliberation no. 1FR/2025 of 6 January 2025 🚦 Response tim...
Read more🇫🇷 Penalty amounts
⚖️ 1. CNIL Penalties📝 No obligation to reveal how fines are calculated“The CNIL must state the legal and factual grounds for a sanction, but it is not...
Read moreVideo surveillance: Use without authorization
Source : PS 0345-2024 🎯 Context: A supermarket customer complains about a refund error. An employee shows her the CCTV footage captured on her mobil...
Read more📣 A lack of confidentiality
🔎 Confidentiality broken in an internal investigation protocol = €120,000 fine. Source: PS 0505-2024 The Spanish regulator, AEPD has fined a company...
Read more🏦 Bank and Access
Source : PS/00477/2023 · A bank allowed unauthorized access to a joint bank account by a third party (the mother of one of the holders), withou...
Read more📌 Data Deletion Not Effectively Implemented
📜 Data Blocking and Deletion : Breach of Article 32 of the LOPDGDD Source :PS-00176-2024 The AEPD imposed a €20,000 fine (reduced to €16,000 for e...
Read more🍊Cookies and Commercial Prospecting 🇫🇷
📱🍪 €50 Million Fine for a French Telecom Operator 📱🍪 On November 14, 2024, the CNIL imposed a €50 million fine on a French telecom operator for displ...
Read more🇫🇮 Costly negligence and security
🔐 Personal data & security A loan comparator 📅 On December 17, 2024, the Finnish Data Protection Authority fined a loan comparator €950,000 for secu...
Read more🇬🇷 Health data and online publication
📸 Doctor: Publication of post-op photos of a former patient... Source : N°50-2024 Greece 💥 The Hellenic Data Protection Authority has issued an ex...
Read more🔎🇳🇴 DPO and insufficient resources
📌 €351,000 fine for a telecommunications company (Norway) 📆 March 2025 📚 Articles violated: 24, 37, 38 and 39 of the GDPR. Source : 21-03823-45 Foll...
Read more💥 Intrusive surveillance of employees
Source : 10096474, Italy, Il garante per la protezione dei dati 🔍 When access to employees' computers turns into widespread surveillance... and cost...
Read more