INPLP article May 11, 2021
Fine of €475,000 for Booking.com reporting data breach 22 days to late. According to a press release of April 6 the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) imposed a [...]
The British Data Protection Authority ICO considers operating systems that are no longer supported inadequate security.
If systems such as Windows 7 and Windows Server 2008 R2 SP1 are no longer supported by Microsoft, this may result in inadequate security, which could then be seen as an infringement of article 32 [...]
Fine for Dutch tennis association for unlawfully selling personal data
The Dutch DPA imposed a fine of 525,000 euros for the unlawful sale of personal data by the Dutch national tennis association the KNLTB. In 2018, the KNLTB unlawfully provided personal data of a [...]
€ 150.000,- GDPR fine imposed on PWC by Greek Data Protection Authority for being not accountable
The Greek HDPA (Hellenic Data Protection Authority) imposed a fine of € 150.000,- on PWC Greece. The employees of PWC were “forced” to sign a Statement of Acceptance of Terms of Personal Data and [...]
Fine of € 460.000,- imposed on Dutch Haga Hospital by Dutch Data Protection Officer, the first Dutch fine under GDPR (July 19, 2019)
This first fine under the GDPR is imposed on the Dutch Haga Hospital for having an insufficient internal security of patient records as stated by the DPA on July 19, 2019. The DPA started an [...]
EU–U.S. Privacy Shield adequacy decision (“Privacy Shield”) adopted on 12 July 2016, assessed by EDPB in report January 22, 2019
In this report of January 22, 2019 The EDPB (European Data Protection Board) assessed once again whether the safeguards provided under the EU-U.S. Privacy Shield are workable and effective and [...]
The first huge GDPR penalty of 50 million euros for GOOGLE imposed by French DPA CNIL on January 21, 2019
An interesting decision of the French Data Protection Authority (“ DPA”) CNIL.( See CNIL.fr) The French CNIL is de first supervisory authority imposing a huge penalty based on the GDPR! In the [...]
The Data Breach Report and the Joint Controllership Report
During the annual EuroCloud Europe CPC (Cloud Privacy Check) conference November 18, 2018 in Vienna, the 30 members (Cordemeyer & Slager is representing the Netherlands) decided to publish [...]
The Dutch Data Protection Authority (Dutch DPA) clarifies the concept “large scale” for the Data Protection Officer (DPO)
Government agencies and public organisations have the obligation to appoint a DPA, regardless the type of data they process. Organisations whose core activities include following individuals or [...]
