Methods and Scope In this EU Casebook 2023, we have reviewed decisions At ComplyCloud, we have been committed to published by the Data Protection Authorities of the delivering comprehensive and pertinent data Netherlands, Germany, Belgium, and Denmark in the protection resources since the General Data Protection period from May 2018 to May 2023. In compiling the Regulation came into effect in May 2018. We have statistical material, we have categorized decisions consistently published a Danish Casebook each year, based on our judgment of the main themes of the encompassing all decisions taken by the Danish Data cases. Protection Authority. These Casebooks serve as a relevant resource for data protection professionals, For each decision in the Casebook, we present a offering concise and business-relevant legal analyses summary delineating both the case’s background and that help navigate the complexities of the field. the decision taken by the respective data protection Expanding on this commitment, we are now excited authority. In addition, we include our commentary to announce the publication of our EU Casebook, on each decision, offering interpretive insights drawn providing an even broader perspective on data from our legal case analysis. It should be noted that protection across the European Union. while the Casebook does not provide comprehensive coverage of all technicalities of the included cases, The Casebook 2023 specifically highlights the decisions our summaries are deliberately tailored to highlight that lead to the 10 most substantial GDPR fines in the questions we deem particularly significant or each of our three focal countries; the Netherlands, interesting for the reader. Germany, and Belgium, complemented by 10 intriguing, handpicked cases from each of these Our summaries aim to provide an overview to readers countries. Recognizing ComplyCloud’s core expertise, working with GDPR and data protection law on a daily the Casebook also includes a collection of notable basis. Therefore, the Casebook should not be regarded decisions by the Danish Data Protection Authority. To as formal legal literature. Rather, the choice to write provide a broad perspective, the Casebook further the Casebook in a user-friendly, accessible language incorporates 10 compelling cases from data protection is intentional. This approach enables our audience authorities and judiciaries across various other EU to gain a broad understanding of the rules’ practical countries. implications — catering to readers regardless of whether they have a legal background or not. 146