National Government Service Centre (NGSC)
€18,700
Insufficient fulfilment of data breach notification obligations
Datum rozhodnutí
29. dubna 2020
Úřad
Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
SE
Sektor
Public Sector and Education
Země
SE
Právo
GDPRStav
FINALPopis
The DPA's decision shows that it took almost five months for the company to notify the data subjects of a data breach and almost three months for the DPA to receive a notification of a data breach concerning an security lack of IT systems of the company.
Právní citace
Art. 33Art. 34
Problémy a porušení
Insufficient fulfilment of data breach notification obligations