Gesetz: DSGVO 5 
ECJ (Case C‑484/24, NTH Haus­tech­nik): Mul­ti­ple Legal Bases Must Be Met Cumulatively
AEPD: Fine (EUR 30,000) for lack of voice dis­tor­ti­on in online video
noyb: Com­plaint against Ope­nAI (infor­ma­ti­on and correction)
ECJ C‑340/21: Ade­qua­te data secu­ri­ty (con­cept and bur­den of pro­of); lia­bi­li­ty for breaches
Ire­land: fine of EUR 345 mil­li­on against Tik­Tok – vio­la­ti­ons of the duty to inform and insuf­fi­ci­ent TOMs regar­ding children
EDSA: Gui­de­lines on decep­ti­ve mea­su­res in social media.
Ire­land: Fines i.S. Face­book (EUR 210M), Insta­gram (EUR 180M) and Whats­App (EUR 5.5M): Incor­rect legal basis and lack of trans­pa­ren­cy (per­so­na­li­zed marketing)
Refe­rence: Moerel, What Hap­pen­ed to the Risk-Based Approach to Data Transfers?
Den­mark: Hea­vy fine for years of data era­su­re violations
1 2