Decision no. 313 | European Data Protection Board

28 December 2021

LSA

CSA

ALL DE

Main legal reference

Article 28 (Processor)

Article 32 (Security of processing)

Article 33 (Notification of a personal data breach to the supervisory authority)

Article 34 (Communication of a personal data breach to the data subject)

Keywords

Personal data breach

Data security

Processor

Clients

Publicly available data

Payment data

Outcome

Administrative fine

Decision 354.9KB