GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Anonymous

Country
Czech Republic
Fine
15,000 CZK
Date
2019-02-28
Sector
-
Articles
Art. 5 (1) f) GDPRArt. 28 (3) GDPR

Insufficient technical and organisational measures to ensure information security

The data have not been processed in a way that ensures an adequate level of security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage through appropriate technical or organisational measures ('integrity and confidentiality'). Furthermore, the controller has not concluded relevant agreements with processors concerning the processing of personal data.