🔎🇳🇴 DPO and insufficient resources
DPO | 30/03/2025
📌 €351,000 fine for a telecommunications company (Norway) 📆 March 2025 📚 Articles violated: 24, 37, 38 and 39 of the GDPR. Source : 21-03823-45

Foll...
Read more
📢🇵🇱 Public sector and DPO
DPO | 30/03/2025
📢 No DPO? No excuse Source: DKN.5131.7.2024 Poland, UODO 🔍 On February 6, 2025, the Polish data protection authority, UODO, fined a public company, t...
Read more
🧠Private club and GDPR
Biometrics & Video Surveillance, Tools & Documentation, Legal basis | 30/03/2025
🔍 Guestbook, video surveillance, privacy policy: when a company underestimates the GDPR (way too much). 📌 The Belgian Data Protection Authority (GBA/A...
Read more
📢 GDPR & Rental
Retention & Minimisation, Confidentiality & Security | 30/03/2025
❌ No ID documents via WhatsApp or Email

When a rental company requests ID documents via WhatsApp — including that of a minor!

Source: PS 00175-2023S...
Read more
🇪🇸 No ID card by email
Confidentiality & Security | 30/03/2025
💥 Requesting an ID by unsecured email can be very costly! Source: PS-00457-2023Country: Spain, AEPD

🧾 Facts

An investor requested information about ...
Read more
🇫🇮 Costly negligence and security
Confidentiality & Security | 30/03/2025
🔐 Personal data & security A loan comparator 📅 On December 17, 2024, the Finnish Data Protection Authority fined a loan comparator €950,000 for secu...
Read more
🇬🇷 Health data and online publication
Data Subject Rights, Legal basis | 30/03/2025

📸 Doctor: Publication of post-op photos of a former patient...

Source : N°50-2024 Greece 💥 The Hellenic Data Protection Authority has issued an ex...
Read more
💥 Intrusive surveillance of employees
Data Subject Rights, Retention & Minimisation | 30/03/2025
Source : 10096474, Italy, Il garante per la protezione dei dati 🔍 When access to employees' computers turns into widespread surveillance... and cost...
Read more
🇪🇸 Abusive communication and GDPR
Data Subject Rights | 30/03/2025
📢 GDPR fine for misuse of professional email addresses

Source: PS/00117/2022Spain, AEPD A €2,000 fine was imposed by the AEPD on a works council memb...
Read more
🇫🇷 Insurance and excessive retention periods
Data Subject Rights, Retention & Minimisation | 29/03/2025
📢 €1.75 Million Fine for a French Insurance Company

Source: SAN 2021-010

👉 The CNIL has sanctioned an insurance company for two serious breaches of ...
Read more
🚫 Spain Failure to Appoint a DPO
DPO | 28/03/2025
When Glovo Fails to Meet Its Obligations 📦🇪🇸📌 AEPD PS/00417/2019

A Spanish citizen filed a complaint against Glovo (GlovoApp23, SL), a home delivery ...
Read more
🚨 SS2I Inappropriate legal basis 🚨
Legal basis | 28/03/2025
📍 Greece | HDPA | €150,000 Fine 🔍 Following a complaint, the Hellenic Data Protection Authority (HDPA) investigated an IT services company (SS2I) reg...
Read more