Details:
Summary | Publication of personal data of students on the website of the Institute with, inter alia, notes about health and progress in school due to technical failure. |
Link: | link |
Related articles: | Art. 5 (1) f) GDPR, Art. 32 GDPR |
Type: | Insufficient technical and organisational measures to ensure information security |
Fine: | EUR 2,000 |
Sector | Public Sector and Education |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/