C029-50 CYPRUS NEWS AGENCY

Data Transfers
Case project
Filing DPA
LSA
Controller
CYPRUS NEWS AGENCY
Case status
Partly Won
Filed: (4 years 4 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Datum Summary
29.02.2024
decision by Cyprus DPA

Cyprus DPA found a violation of Article 44 GDPR since the controller could not ensure a level of protection guaranteed by the GDPR.
DPA did fine the controller or ordered the prohibition or suspention of the transfer to Google LLC.
The Cyprus DPA held that Google LLC does not have to comply with Chapter V of the GDPR.
The Cyprus DPA ordered the controller to ensure that the transfer takes place on basis of the new EU-US Data Protection Framework or on basis of an appropriate guarantee under Article 46 GDPR.
22.03.2022
DSB replied that complaint is still being investigated

DSB replied that complaint is still being investigated, without providing any news.
17.02.2022
noyb asked for an update again
12.08.2021
DSB informed us that the complaint continues to be under investigation

DSB informed us that the complaint continues to be under investigation and that it is being handled in close cooperation with other concerned DPAs in order to esure a uniform approach.
09.07.2021
noyb asks DSB for update
25.01.2021
DSB forwarded us a letter by the Cyprus DPA

DSB forwarded us a letter by the Cyprus DPA, which just states that they have commenced an investigation.
22.09.2020
DSB stayed procedure until LSA is established and has decided
17.08.2020
Complaint