# A&G Couriers Limited T/A Fastway Couriers (Ireland): Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Data Protection Authority of Ireland
- Date: 2022-12-30
- Original: https://www.enforcementtracker.com/ETid-1677
- Canonical: https://overview.legal/posts/47792
- Topics: Security, Right of Access, Processing Agreement, Privacy by Design & Default, Controllers, Personal Data, Law Enforcement, Supervisory Authorities, Data Controller

## Summary

The Irish DPA (DPC) has fined A&G Couriers Limited T/A Fastway Couriers (Ireland) EUR 15,000. During a changeover of its IT systems, the controller had suffered a cyberattack in which unauthorized third parties gained access to personal data. The DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data, which facilitated such an attack.

## Full text

The Irish DPA (DPC) has fined A&G Couriers Limited T/A Fastway Couriers (Ireland) EUR 15,000. During a changeover of its IT systems, the controller had suffered a cyberattack in which unauthorized third parties gained access to personal data. The DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data, which facilitated such an attack.

GDPR Articles: Art. 32 (1) GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/47792 · 2026-08-22