CJEU says observed personal data is collected directly from the data subject — what it means in practice - IAPP
IAPP·February 11, 2026·fine
Companies Mentioned
Regulations Mentioned
Linked Fines
| Company | Date | Regulation | Amount (USD) | Type |
|---|---|---|---|---|
| Storstockholms Lokaltrafik | 2021-06-21 | GDPR | $1,728,000 | Non-compliance with lawful basis for data processing |