# National Government Service Centre (NGSC): Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
- Date: 2020-04-29
- Original: https://www.enforcementtracker.com/ETid-273
- Canonical: https://overview.legal/posts/46388
- Topics: Notification Obligation, Data Breaches, Notified Body Reporting and Notification Obligations, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Education, Public Sector, Public Authority, Security, Personal Data, Supervisory Authorities

## Summary

The DPA's decision shows that it took almost five months for the company to notify the data subjects of a data breach and almost three months for the DPA to receive a notification of a data breach concerning an security lack of IT systems of the company.

## Full text

The DPA's decision shows that it took almost five months for the company to notify the data subjects of a data breach and almost three months for the DPA to receive a notification of a data breach concerning an security lack of IT systems of the company.

GDPR Articles: Art. 33 GDPR, Art. 34 GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/46388 · 2026-08-22