CJEU clarifies responsibility and the question of fault for the imposition of fines
In order to impose GDPR fines, it must be established who is responsible for the processing activity and whether and, if so, who must be at fault. The CJEU has now provided clarity.