Content type · 8 documents in this view · 3,811 in total

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

Enforcement dashboard — fines by country, authority and article →

Country: Portugal (8) Clear filter

Filter by Topic Supervisory Authorities 3587 Processing 2635 Personal Data 2394 Controllers 2017 Processing Agreement 1114 Security 1013 Supervision 847 Healthcare 621 Law Enforcement 568 Monitoring 547 Public Authority 539 Consent 508

1–8 of 8 sort newest largest fine oldest

€4.3M Portuguese National Statistical Institute: Non-compliance with general data processing principles The Portuguese DPA has fined the Portuguese National Statistical Institute EUR 4,3 million. The DPA found numerous violations of the GPDR in connection with the 2021 census in… PORTUGAL ·Art. 5, 9, 12 +5 Privacy Shield Controllers DPIA Nov 2, 2022

€180,000 Setúbal municipality: Non-compliance with general data processing principles The Portuguese DPA has imposed a fine of EUR 170,000 on Setúbal municipality. The DPA found data protection violations regarding the collection of personal data from Ukrainian… PORTUGAL ·Art. 5, 13, 37 Public Authority Retention Period Personal Data Nov 2, 2022

€1.3M Lisbon City Council: Insufficient legal basis for data processing The Portuguese DPA has imposed a fine of EUR 1.25 million on the Lisbon City Council. The fine is the sum of 225 fines from various violations committed by the municipality since… PORTUGAL ·Art. 5, 6, 9 +2 DPIA Personal Data International Transfer Dec 21, 2021

Deliberação 2019/494 In its Opinion 20/2018 concerning the draft of Law 58/2019 which ensures the implementation of the GDPR in the portuguese national legal framework, the DPA drew the attention of… Deliberação 2019/494 ·Portugal Controllers Processors Legitimate Interest Sep 3, 2019

€2,000 PORTUGAL DPA: Insufficient fulfilment of information obligations Inexistence of signalization regarding the use of CCTV systems Art. 13 ·Insufficient fulfilment of information obligations Supervisory Authorities Video Surveillance Processing Agreement Mar 25, 2019

€20,000 PORTUGAL DPA: Insufficient fulfilment of data subjects rights Denial of the right to access recorded phone calls by the Data Subject Art. 15 ·Insufficient fulfilment of data subjects rights Supervisory Authorities Personal Data Data Subject Rights Exercise Modalities and Procedures Feb 5, 2019

€400,000 Public Hospital: Insufficient technical and organisational measures to ensure information security Investigation revealed that the hospital’s staff, psychologists, dietitians and other professionals had access to patient data through false profiles. The profile management… PORTUGAL ·Art. 5, 32 Security Healthcare Health Data Jul 17, 2018