Östersund Municipality's Department for Children and Education
€26,500
Insufficient technical and organisational measures to ensure information security
Date de décision
28 novembre 2023
Autorité
Data Protection Authority of Sweden
SE
Secteur
Public Sector and Education
Pays
SE
Droit
GDPRStatut
FINALDescription
The Swedish DPA has imposed a fine of EUR 26,500 on the Östersund Municipality's Department for Children and Education. The authority had failed to carry out a data protection impact assessment before introducing the digital school platform Google Workspace in 24 schools in the municipality.
Citations légales
Art. 35 (1)
Questions et violations
Insufficient technical and organisational measures to ensure information security