Lands Authority

€5,000

Insufficient technical and organisational measures to ensure information security

Fecha de la decisión

18 de febrero de 2019

Autoridad

Data Protection Commissioner of Malta

MT

Sector

Public Sector and Education

País

MT

Ley

GDPR

Estado

FINAL

Descripción

As a result of the lack of appropriate security measures on the Lands Authority website, over 10 gigabytes of personal data became easily accessible to the public via a simple google search. The majority of the leaked data contained highly-sensitive information and correspondence between individuals and the Authority itself. The Lands Authority chose not to appeal. In Malta, in the case of a breach by a public authority or body, the Data Protection Commissioner may impose an administrative fine of up to €25,000 for each violation and may additionally impose a daily fine of €25 for each day such violation persists.

Citas legales

Art. 5Art. 32

Problemas e infracciones

Insufficient technical and organisational measures to ensure information security

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.