500,000) as compensation for the unlawful processing ... The ODPC ruled that the school had violated key principles of data protection, including transparency, purpose limitation, and lawful ...

One (Case C-300/21) deals with compensation for breaches of the bloc’s General Data Protection Regulation ... that such rules must comply with GDPR principles of equivalence and effectiveness ...