Enforcement
EN National Government Service Centre (NGSC): Insufficient fulfilment of data breach notification obligations
€18,700 fine - Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
Content
The DPA's decision shows that it took almost five months for the company to notify the data subjects of a data breach and almost three months for the DPA to receive a notification of a data breach concerning an security lack of IT systems of the company.
GDPR Articles: Art. 33 GDPR, Art. 34 GDPR
Industry: Public Sector and Education