The Garante issued the largest ever GDPR fine in Italy against ENEL Energia, which, however, shows deficiencies in the enforcement procedures that should be improved to benefit privacy-related values across Europe.ย
The Court of Justice of the European Union ("CJEU") has ruled on the conditions under which national data protection supervisory authorities may impose administrative fines on one or more data controllers for a violation of EU Regulation 679/2016 ("GDPR").
The long-awaited EDPB guidelines on the calculation of GDPR fines have now been published, but the view from data protection authorities reveals some areas for improvement.ย
The Danish privacy authority issued a fine against a hotel chain of approximately โฌ 148K for breach of the data retention principle for data of its customers.