Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance
€9,000
Insufficient technical and organisational measures to ensure information security
Decision Date
January 13, 2020
Authority
Cypriot Data Protection Commissioner
CY
Sector
Public Sector and Education
Country
CY
Law
GDPRStatus
FINALDescription
Granting the police access to personal data and failing to take adequate measures to secure the data, despite the warnings of the Supervisor, constituted a breach of Article 32 of the GPPR.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security