Cypriot Ministry of Defense
€5,000
Insufficient technical and organisational measures to ensure information security
Decision Date
January 1, 2022
Authority
Cypriot Data Protection Commissioner
CY
Sector
Public Sector and Education
Country
CY
Law
GDPRStatus
FINALDescription
The Cypriot DPA has imposed a fine of EUR 5,000 on the Cypriot Ministry of Defense. The controller had suffered a cyber attack which, according to the DPA, had been caused due to a lack of technical and organizational measures for the protection of personal data and a lack of supervision of a processor.
Legal Citations
Art. 24Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security