11 May 2021
… Dutch DPA: PVV Overijssel fined for failing to report data breach 11 May 2021 Netherlands The Dutch Data Protection Authority (DPA) has imposed a fine of €7,500 … The Dutch Data Protection Authority (DPA) has imposed a fine of €7,500 … of the Freedom Party (PVV) for failing to report a data breach to the DPA. The data breach involved information …
11 January 2021
… Polish DPA: A data breach must be notified to the supervisory authority 11 … on ENEA S.A. company for failing to notify a personal data breach. The Polish DPA received information about the … on ENEA S.A. company for failing to notify a personal data breach. The Polish DPA received information about the …
26 January 2021
… Polish DPA: University Fined for the lack of Data Breach Notifications 26 January 2021 Poland The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 25 000 … The President of the Personal Data Protection Office (UODO) imposed a fine of PLN 25 000 …
10 June 2022
… Data breach: the Italian SA fines INAIL EUR 50,000 10 June 2022 … letter g) (lawfulness of processing also regarding health data); Art. 32 (security); Art. 33 (personal data breach). Italian DP Code: sections 2-b and 2-f (lawfulness … letter g) (lawfulness of processing also regarding health data); Art. 32 (security); Art. 33 (personal data breach). …
3 February 2022
… imposed to telecommunications companies due to personal data breach and illegal data processing 3 February 2022 Greece Background … and modalities for the exercise of the rights of the data subject (Article 12), Information to be provided where … of the GDPR, Fines imposed Key words: GDPR, Data breach, Security, Data protection impact assessment, …
4 May 2022
… Health data breach: Dedalus Biologie fined 1.5 million euros 4 May 2022 … 28 GDPR) Decision: Administrative fine Key words: Health data breach Summary of the Decision Origin of the case On … 28 GDPR) Decision: Administrative fine Key words: Health data breach Summary of the Decision Origin of the case On …
21 March 2019
… Hungarian SA investigation regarding data breach of the Democratic Coalition (DK) 21 March 2019 … the NAIH was informed by a Hungarian citizen, that the database containing personal data of the party’s supporters … the NAIH was informed by a Hungarian citizen, that the database containing personal data of the party’s supporters …
16 December 2019
… and modalities for the exercise of the rights of the data subject) Article 13 (Information to be provided where personal data are collected from the data subject) Article 14 (Information to be provided where … Nationale de l’Informatique et des Libertés (French Data Protection Authority), Having regard to Treaty no. 108 …
10 December 2020
… Dutch SA fines Booking.com for delay in reporting data breach 10 December 2020 Netherlands Belgium France Sweden … Booking.com Legal Reference: Notification personal data breach to supervisory authority, article 33 (1) … Booking.com Legal Reference: Notification personal data breach to supervisory authority, article 33 (1) …
10 March 2020
… Personal data breach at the Breiðholt Upper Secondary School – … Upper Secondary School in a case relating to a personal data breach. The breach occurred when a teacher at the school … Upper Secondary School in a case relating to a personal data breach. The breach occurred when a teacher at the …
14 March 2023
… fines controller EUR 4500 for failure to notify a personal data breach 14 March 2023 Poland Background information Date of … Legal references: Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 … Legal references: Article 33 (Notification of a personal data breach to the supervisory authority), Article 34 …
22 March 2022
… Irish SA fines Meta Platforms (formerly Facebook) €17M for data breaches 22 March 2022 Ireland Background information Date … Administrative fine of €17m imposed Key words: Personal data breach; demonstration of implementation of security … Administrative fine of €17m imposed Key words: Personal data breach; demonstration of implementation of security …
30 April 2025
… Imposition of a fine on a bank for an incident of personal data breach 30 April 2025 Greece Background information Date of … and Confidentiality), Article 15 (Right of access by the data subject), Article 25.1 (Data protection by design and … and Confidentiality), Article 15 (Right of access by the data subject), Article 25.1 (Data protection by design and …
10 March 2020
… Personal data breach at the National Center of Addiction Medicine – … of Addiction Medicine in a case relating to a personal data breach. The National Center of Addiction Medicine is an NGO … of Addiction Medicine in a case relating to a personal data breach. The National Center of Addiction Medicine is an …
11 January 2021
… Polish DPA Fines ENEA S.A.: A data breach must be notified to the supervisory authority 11 … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) … 000) on ENEA S.A. company for failing to notify a personal data breach. The Personal Data Protection Office (UODO) …
3 January 2023
… fine on telecom operator for failure to notify the personal data breach 3 January 2023 Poland Background information Date of … company to provide information on the said personal data breach, and to provide an assessment in terms of the … company to provide information on the said personal data breach, and to provide an assessment in terms of the …
7 June 2019
… must receive specific, helpful information in case of a data breach 7 June 2019 Italy The information provided should … risks they may run and how they can protect their personal data. No generic information may be provided to users in … risks they may run and how they can protect their personal data. No generic information may be provided to users in …
20 February 2019
… IDPC - Lands Authority Personal Data Breach 20 February 2019 Malta The Commissioner has today … Lands Authority after concluding the investigation of the data breach, that was brought to his attention by the Times … Lands Authority after concluding the investigation of the data breach, that was brought to his attention by the Times …
20 January 2023
… SA has once again investigated Virgin Mobile's personal data breach 20 January 2023 Poland Background information Date of … Article 5(1)(f), Accountability Article 5(2), Data protection by design and by default Article 25(1), … Article 5(1)(f), Accountability Article 5(2), Data protection by design and by default Article 25(1), …
18 January 2024
… EDPB publishes OSS case digest on Security of Processing and Data Breach Notification 18 January 2024 EDPB The EDPB has … case digest on Security of Processing (Art. 32 GDPR) and Data Breach Notification (Art. 33 & 34 GDPR) . Since the … case digest on Security of Processing (Art. 32 GDPR) and Data Breach Notification (Art. 33 & 34 GDPR) . Since the …