Welcome to ComplyCloud’s EU GDPR Casebook 2023 It is with great pleasure that I present to you the EU The GDPR’s five-year journey has been nothing short GDPR Casebook 2023. In this edition, the ComplyCloud of transformative. Since its introduction in May 2018, legal team has gathered, categorized, and analyzed the GDPR has given individuals greater control over a range of decisions from across the European Union, their personal data and introduced new standards for with particular focus on the Data Protection Agencies of businesses. It has shaped the digital transition in the EU, the Netherlands, Germany, Belgium, and Denmark. The guiding both domestic and international approaches time span of these cases ranges from the inception of to data regulation. the GDPR in May 2018 to May 2023. At ComplyCloud, we have been keen observers of Specifically, this Casebook highlights: this development, tracking the progression and • Cases resulting in the 10 largest GDPR fines from interpretation of the GDPR throughout the European each of our three focal countries; the Netherlands, Union. The ongoing evolution of GDPR, its impact, and Germany, and Belgium. the challenges it presents continue to be areas of focus • 10 intriguing cases from each of the three focal for us. However, in compiling this Casebook, our aim countries, handpicked due to their potential impact goes beyond mere observation; we strive to promote and unique features. transparency and provide a lens into the trends of • A collection of interesting cases from Denmark, in the GDPR and changes in its enforcement. The cases recognition of ComplyCloud’s core expertise. presented here underline the actions taken by national data protection authorities across the EU, with over 2.5 • Selected compelling cases from various other billion EUR in fines imposed for GDPR breaches. This EU countries, which we found to be of particular underscores the commitment to safeguarding data interest. protection within the EU. Through this comprehensive collection, we aim to paint In keeping with our tradition, we supplement our legal a picture of the evolving data privacy landscape in the analyses with a graphical presentation of key figures in EU, building on the principal decisions that continually data protection law. With our statistical overview, you expand our understanding of the General Data will be presented with EU-wide numbers on the nature Protection Regulation. Whether you are a seasoned of violations, fines, sectoral trends, and more. legal professional or a newcomer to the field of data On behalf of everyone at ComplyCloud, we thank protection, we believe this Casebook will serve as a you for your interest and engagement with our work. valuable resource in navigating the complexities of As we continue to navigate the intricacies of GDPR GDPR compliance. compliance, we are committed to providing you with the most current, comprehensive, and user-friendly resources. I hope you find the GDPR Casebook 2023 informative and useful. Enjoy your read! Best regards, Martin Folke Vasehus CEO & IT Lawyer ComplyCloud