5 years GDPR: The 2023 anniversary edition of the CMS Enforcement Tracker Report is now available providing a deep dive into fines imposed under the GDPR: https://t.co/VPMKVypleG
New fine in Ireland: The Irish Data Protection Commission (DPC) has fined Meta Platforms Ireland Limited EUR 251 million for violations of Art. 25 GDPR and Art. 33 GDPR:
https://t.co/E4UShdBKzy
New fine in Poland: The Polish DPA has fined Santander Bank Polska S.A. EUR 326,000 for failing to report a data breach to the DPA and data subjects in a timely manner:
https://t.co/FYiXcLXvGX
New fine in Greece: The Hellenic DPA has imposed a fine of EUR 175,000 on the Greek Ministry of Immigration and Asylum for violating Art. 25 GDPR, Art. 31 GDPR and Art. 35 GDPR:
https://t.co/G1aFtDUvaT
New fine in Spain: The Spanish DPA has imposed a fine of EUR 365,000 on CTC EXTERNALIZACIÓN, S.L. for unlawfully processing employee data:
https://t.co/nW7JkINEvx
New fine in Italy: The Italian DPA has imposed a fine of EUR 2.8 million on UniCredit S.p.a. for violating Art. 5 (1) f) GDPR and Art. 32 (1), (2) GDPR: https://t.co/I2oQrCQMWW
New fine in Norway: The Norwegian DPA has imposed a fine of EUR 1.7 million on Arbeids- og velferdsetaten, the Norwegian Labor and Welfare Administration (NAV) due to insufficient technical and organizational measures to ensure data protection:
https://t.co/nkQ3xvPpvP
New fine in Spain: The Spanish DPA has imposed a fine of EUR 50,000 on SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L. for violating Art. 6 (1) GDPR:
https://t.co/W2jMh2ahAi
New fine in the Netherlands: The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality for excessively storing personal data:
https://t.co/oPNYZjQCuj
New fine in Italy: The Italian DPA has imposed a fine of EUR 10 million on electricity and gas supplier Axpo Italia Spa for violating Art. 5 (1) a), d) GDPR and Art. 24 (2) GDPR:
https://t.co/8VTXyOpEyt
New fine in Croatia: The Croatian DPA (AZOP) has imposed of fine of EUR 5,470,000 on a debt collection company for processing personal data without a valid legal basis: https://t.co/fL6mQw4XYh
New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on TELEFÓNICA MÓVILES ESPAÑA, S.A.U. for violating Art. 6 (1) GDPR:
https://t.co/X4EvEXntjR
New fine in Italy: The Italian DPA has imposed a fine of EUR 15,000 on Thin Srl for violating Art. 5 (1) a) GDPR, Art. 9 GDPR and Art. 13 GDPR:
https://t.co/NKIehLG3oA
New fine in Spain: The Spanish DPA has imposed a fine of EUR 70,000 on Digi Spain Telecom, S.L.U for violating Art. 6 (1) GDPR:
https://t.co/En1OrTFyxL
New fine in Poland: The Polish DPA has fined a company EUR 7,500 for failing to provide information requested by the DPA during an investigation:
https://t.co/pBloKgHd5P
New fine in Lithuania: The Lithuanian DPA has fined a company EUR 20,000 for violating Art. 5 (1) e), f) GDPR and Art. 32 (1) b), d) GDPR:
https://t.co/4unO8zqxuH
New fine in Sweden: The Swedish DPA has fined music streaming provider Spotify EUR 4.9 million for violating Art. 12 (1) GDPR and Art. 15 (1), (2) GDPR:
https://t.co/ulOBk6nxLS
New fine in Spain: The Spanish DPA has fined a private individual EUR 10,000 for publishing a picture and the address of another person on a website without their consent:
https://t.co/MfJT3AtXrQ
New fine in Romania: The Romanian DPA has imposed a fine of EUR 5,000 on the Romanian Post for violating Art. 5 GDPR and Art. 6 GDPR:
https://t.co/SQRCtciPIp
New fine in Romania: The Romanian DPA has imposed a fine of EUR 18,000 on AUTOMOBILE BAVARIA SRL for failing to implement sufficient technical and organisational measures to ensure information security:
https://t.co/Wsz3I11aIJ