Enforcement
EN NEXPUBLICA FRANCE: Insufficient technical and organisational measures to ensure information security
€1,700,000 fine - French Data Protection Authority (CNIL)
Content
The French DPA has imposed a fine of EUR 1,700,000 on NEXPUBLICA FRANCE. The controller, who was a software developer, created and offered a software package designed to manage user relations in the social action sector. Insufficient technical and organisational measures resulted in a cyber incident affecting the software.
GDPR Articles: Art. 32 GDPR
Industry: Industry and Commerce