Violation of obligations arising from the GDPR – case analysis

This bachelor thesis focuses on the impact of the General Data Protection Regulation (GDPR) on organisations. The aim is to raise awareness of the obligations arising from this regulation through theoretical and practical analysis, deepen understanding of the measures necessary for GDPR compliance, and propose preventive actions. The theoretical part describes the key concepts, principles, and sanction mechanisms of the GDPR, drawing from legal documents, academic literature, and materials provided by supervisory authorities. The practical part analyses three recent cases of GDPR violations involving Amazon Europe Core Sàrl, Meta Platforms Ireland Ltd, and Avast Software s.r.o. This analysis is based on publicly available decisions by supervisory authorities, annual reports, press releases, and news articles. The outcome is a set of concrete recommendations (such as training, audits, compliance programs, and the use of Data Protection Officer services) that can help organisations reduce the risk of violations and strengthen the protection of personal data. The thesis offers practical value to organisations in both the private and public sectors striving for higher GDPR compliance and preventing legal and reputational risks.