Supervisor Authority: Failure to report a Data Breach
The Irish Data Protection Commissioner has imposed a fine of EUR 125,000 because a controller (the City of Dublin) disclosed personal data of approximately 13,000 people without authorisation after a server was attacked with malware. In addition to the master [...]
GDPR: Fines for incorrect risk assessment
Fines may be imposed for "incorrect" risk assessment in the event of a data breach. In the event of a data breach, in addition to notification to the data protection supervisory authority, it may also be necessary to notify the [...]
