Enforcement
EN Legal Entity: Insufficient technical and organisational measures to ensure information security
€1,300 fine - Slovenian Supervisory Authority (Informacijski pooblaščenec)
Content
The Slovenian DPA has imposed a fine of EUR 1,300 on a legal entity. An employee of the controller stored personal data on her work laptop without securing it, for example by encrypting it, and took the laptop outside of the secured workspace, thereby allowing third parties to gain access to the data. The entity was fined EUR 1,000, and the person responsible was fined EUR 300.
GDPR Articles: Art. 32 (1) a), b) GDPR
Industry: Not assigned