Allium UPI
€3,000,000
Insufficient technical and organisational measures to ensure information security
Ημερομηνία απόφασης
5 Σεπτεμβρίου 2025
Αρχή
Estonian Data Protection Authority (AKI)
EE
Τομέας
Industry and Commerce
Χώρα
EE
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Estonian DPA has imposed a fine of EUR 3,000,000 on Allium UPI. The controller failed to implement adequate technical and organisational measures to ensure data security. This resulted in a data breach involving the personal data of 750,000 individuals, including children and other vulnerable groups.
Θέματα & Παραβάσεις
Insufficient technical and organisational measures to ensure information security