CJEU. C-768/21 | Land Hessen. Personal data protection: the supervisory authority is not obliged to exercise a corrective power in all cases of breach and, in particular, to impose a fine
It may refrain from doing so where the controller has already taken the necessary measures on its own initiative. In Germany, a savings bank found that one of its employees had consulted a customer’s personal data on several occasions without… Read moreCJEU. C-768/21 | Land Hessen. Personal data protection: the supervisory authority is not obliged to exercise a corrective power in all cases of breach and, in particular, to impose a fine