Index GDPR in numbers 7 Berlin e-commerce group fined for DPO conflict of interest 52 01 Largest fines -Netherlands 15 VfB Stuttgart fined for neglecting the accountability principle 54 Tax administration fined for fraud blacklist 16 Tax administration fined for discriminatory processing 17 04 Selected interesting cases – Tennis association fined for selling personal data 18 Germany 55 National Credit Register (BKR) fined for personal Scalable Capital ordered to compensate data subject for data access 19 non-material damages 56 TikTok fined for violating children’s privacy 20 Company ordered to cover repair costs for customer 57 Company fined for processing employees’ fingerprint data 21 Insurance company ordered to cover the cost of repairs Municipality fined for missing legal basis for Wifi-tracking 22 for a customer 60 Foreign office fined for poor security 23 Data subject awarded reparation after unlawful transfer DPG Media fined for unnecessary ID requests 24 of IP addresses 61 Locate Family fined for not appointing a representative 25 Data subject awarded damages for unauthorized criminal background check 62 Data Processor’s promises regarding third-country 02 Selected interesting cases – transfer were valid 63 Netherlands 26 Claim of non-material damages rejected by Court 64 Can commercial interest be a legitimate interest? 27 Copyright law prioritized artistic freedom over personality rights 65 Grandmother ordered to delete Facebook photos of Disclosure of personal data for the enforcement of grandchildren 29 civil law claims 67 Legal basis for registration in Credit System 30 Dismissal of DPO in concerns of potential conflicts Surgeon sued Google for linking to articles about her 31 of interests justified under national legislation 68 Formal warning to supermarket about facial recognition 32 05 Largest fines – Belgium 69 Compensation for non-material damage 33 Right to access bank documents 34 Google Belgium SA Fined for violating the right to Does the right to access also extend to exams and be forgotten 70 comments? 35 Interactive Adverting Bureau Europe fined for the Mother’s right to rectification regarding opinion on non-compliance of its Transparency & Consent child’s safety 36 Framework 72 Uber, right to access and data portability 37 Brussels Zaventem Airport fined for processing health data about travelers 74 03 Largest fines - Germany 40 Brussels South Charleroi Airport fined for processing health data about travelers 76 H&M fined for insufficient legal basis for processing Financial company fined for lacking sufficient sensitive personal data 41 organizational measures 77 Notebooksbilliger.de fined for lack of legal basis for Bank fined due to a conflict of interest regarding its DPO 78 video surveillance 42 SA Rossel & Cie media company fined for unlawful 1&1 Telecom GmBH fined for insufficient security use of cookies 79 measures 44 Roularta Media Group fined for unlawful use of Brebau GmbH fined for for lack of legal basis and cookies 81 transparency 46 Family Service fined for unlawful consent practices 83 AOK Baden-Württemberg fined for failing to security Parking ticket control company fined for several of processing 47 GDPR violations 85 Volkswagen fined for not providing data subjects sufficient information about the data processing 48 Bank fined for creating costumer profiles without a legal basis 50 Vatenfall Europe Sales GmbH fined for not fulfilling transparency obligations 51 4