Östersund Municipality's Department for Children and Education
€26,500
Insufficient technical and organisational measures to ensure information security
Decision Date
November 28, 2023
Authority
Data Protection Authority of Sweden
SE
Sector
Public Sector and Education
Country
SE
Law
GDPRStatus
FINALDescription
The Swedish DPA has imposed a fine of EUR 26,500 on the Östersund Municipality's Department for Children and Education. The authority had failed to carry out a data protection impact assessment before introducing the digital school platform Google Workspace in 24 schools in the municipality.
Legal Citations
Art. 35 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security