EU GDPR Art 28
-

Vodafone fined for GDPR infractions in Germany
Failure to adequately monitor the work of third-party agencies and security deficiencies of online portal lead to a €45m ($51m) fine.
-

DSARs: How to understand your obligations beyond data
UK and EU courts are increasingly saying that it’s not enough to point to a privacy notice to satisfy the extra GDPR requirements.
-

Electricity and gas firm fined €5m for unsolicited contacts and using old data
More than 2,300 customers were contacted, with some ‘relationships on paper’ endorsed with false signatures.
-

Are data processors really immune from data protection fines under GDPR?
When do regulators choose to go after data processors instead of data controllers?
-

Santa Claus is coming to town, but is he GDPR compliant?
“He’s making a list, he’s checking it twice, he’s gonna find out who’s naughty or nice” … but is Santa doing so in compliance with the GDPR?
-

GDPR compliance: Should you sweat the small(er) stuff?
A recent data protection fine highlights the risks of getting a few key things wrong.
