Cypriot Ministry of Defense
€5,000
Insufficient technical and organisational measures to ensure information security
Decision Date
1 de janeiro de 2022
Authority
Cypriot Data Protection Commissioner
CY
Sector
Public Sector and Education
Country
CY
Law
GDPRStatus
FINALDescription
The Cypriot DPA has imposed a fine of EUR 5,000 on the Cypriot Ministry of Defense. The controller had suffered a cyber attack which, according to the DPA, had been caused due to a lack of technical and organizational measures for the protection of personal data and a lack of supervision of a processor.
Legal Citations
Art. 24Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security