Lands Authority
- Country
- Malta
- Fine
- 5,000 EUR
- Date
- 2019-02-18
- Sector
- Public Sector
- Articles
- Art. 5 GDPRArt. 32 GDPR
Insufficient technical and organisational measures to ensure information security
Due to the lack of necessary security measures on the Lands Authority's website, it was reported by a local newspaper that over 10 gigabytes of personal data were rendered accessible via a Google search. It was reported that the data contained sensitive correspondence between individuals and the Authority itself. In Malta, if a public authority or public body is found to be in breach of data protection laws, the Data Protection Commissioner can impose an administrative fine of up to EUR 25 000 for every violation, in addition to a daily fine of EUR 25 for as long as the violation subsists. In this case the Lands Authority did not Appeal the IDPC's decision. Authority: Office of the Information and Data Protection Commissioner (IDPC)