Enforcement · Data Protection Authority of Ireland EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Slane Credit Union Ltd.: Insufficient technical and organisational measures to ensure information security

€5,000 Fine
Slane Credit Union Ltd.
IRELAND
Art. 5 GDPR Art. 24 GDPR Art. 28 GDPR Art. 30 GDPR Art. 32 GDPR
Data Breaches Controllers Security Processors Processing Agreement Privacy by Design & Default Insurance Personal Data
Jan 26, 2022 Source

How it connects

Related across sources

News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet Guidance EDPB Annual Report 2021 EDPB Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH EDPB Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News DeFine is a calculator for GDPR fines based on method of the EDPB Kromann Reumert

Full text

The Irish DPA has imposed a fine of EUR 5,000 on Slane Credit Union Ltd. The controller had notified the DPA of a data breach in 2018. Due to an error in a search engine optimization tool installed on the controller's website, four reports of member inquiries containing personal member data were unintentionally published. The incident affected 76 members, including minors, and their personal data such as names, addresses, gender, birth dates, account numbers, etc. The DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data. In addition, the DPA concluded that the controller failed to conduct due diligence on the processor and to conclude a GDPR compliant contract with the processor.

Industry: Finance, Insurance and Consulting

Original document at the source www.dataprotection.ie

Similar Content