Cyprus

Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance

9,000 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2020-01-13.

Rank · Sector

#191

of 356 in Public Sector and Education

Rank · Cyprus

#19

of 47

Rank · All fines

#1,462

of 3,042

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2020-01-13
Controller / Processor: Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance
Sector: Public Sector and Education
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Granting the police access to personal data and failing to take adequate measures to secure the data, despite the warnings of the Supervisor, constituted a breach of Article 32 of the GPPR.

Open original source Links to the regulator's original publication or another source.