Gesetz: DSGVO 32 
ECJ C‑340/21: Ade­qua­te data secu­ri­ty (con­cept and bur­den of pro­of); lia­bi­li­ty for breaches
Micro­soft Exch­an­ge Ser­ver: Need for action for companies
EDSA: 2nd ver­si­on of the gui­de­lines on Pri­va­cy by Design and Pri­va­cy by Default / comm­ents on the systematics.
LfDI: Fine of EUR 1.24M against health insu­rance com­pa­ny for sen­ding adver­ti­sing emails wit­hout consent
Spain: GDPR fine against lawyer
DSK: Mini­mum pro­tec­tion of per­so­nal data when recei­ving and sen­ding e‑mails
DPO Austria: Lack of dou­ble opt-in pro­ce­du­re as a breach of GDPR 32
BfDI: Fine of EUR 9.5 mil­li­on against a tele­com provider
EDPB: Gui­de­lines on Pri­va­cy by Design and Pri­va­cy by Default (draft).
1 2