C029-49 Cyprus Football Association

Data Transfers
Case project
Filing DPA
Controller
Cyprus Football Association
Case status
Partly Won
Filed: (3 years 7 months ago)

This is one of noyb 101 complaints which were filed after the "Schrems II" judgement in Summer 2020. The judgement invalidated the EU-US data transfer mechanism "Privacy Shield". The cases were generated based on implemented Google Analytics or Facebook tracking code on websites by EU providers, which leads to unlawful data transfers to the United States.

Protocol
Date Summary
29.02.2024
decision by Cyprus DPA

Cyprus DPA found a violation of Article 44 GDPR since the controller could not ensure a level of protection guaranteed by the GDPR. DPA did fine the controller or ordered the prohibition or suspention of the transfer to Google LLC. The Cyprus DPA held that Google LLC does not have to comply with Chapter V of the GDPR. The Cyprus DPA ordered the controller to ensure that the transfer takes place on basis of the new EU-US Data Protection Framework or on basis of an appropriate guarantee under Article 46 GDPR.

14.04.2023
Update by DSB and Cyprus DPA

In respect of your complaint, Cyprus DPA acts as the lead supervisory authority under the GDPR. As part of the investigation, the Controller was asked a number of questions in relation to the issues raised in your complaint. Following the responses to the initial inquiries, Cyprus DPA followed up with additional questions, in order to further investigate the matters raised in your complaint. All responses are still being assessed and the investigation is still undergoing.

08.03.2023
noyb asked for an update again
22.03.2022
DSB replied that complaint is still being investigated

DSB replied that complaint is still being investigated, without providing any news.

17.02.2022
noyb asked for an update again
05.08.2021
DSB informed us that the complaint continues to be under investigation

DSB informed us that the complaint continues to be under investigation and that it is being handled in close cooperation with other concerned DPAs in order to esure a uniform approach.

09.07.2021
noyb asked for an update
25.01.2021
DSB forwarded us a letter by the Cyprus DPA

DSB forwarded us a letter by the Cyprus DPA, which just states that they have commenced an investigation.

22.09.2020
DSB stayed procedure until LSA is established and has decided
17.08.2020
Complaint