The decision of the CJEU on potential damages deriving from a data breach might potentially increase the risk of a class action connected to privacy related violations.ย
The Court of Justice of the European Union ("CJEU") has ruled on the conditions under which national data protection supervisory authorities may impose administrative fines on one or more data controllers for a violation of EU Regulation 679/2016 ("GDPR").
The long-awaited EDPB guidelines on the calculation of GDPR fines have now been published, but the view from data protection authorities reveals some areas for improvement.ย
The Italian data protection authority issued a โฌ 2.5 million fine against a food delivery company for GDPR violations arising from its riders' data processing.
The report published by DLA Piper on GDPR fines and data breach notifications offers a snapshot of what has happened in the privacy world during the past 12 months with mixed signals, also relating to Italy.