Sweden

Östersund Municipality's Department for Children and Education

26,500 €

GDPR enforcement action by Data Protection Authority of Sweden on 2023-11-28.

Rank · Sector

#95

of 357 in Public Sector and Education

Rank · Sweden

#32

of 46

Rank · All fines

#946

of 3,050

Case details

Authority: Data Protection Authority of Sweden
Date: 2023-11-28
Controller / Processor: Östersund Municipality's Department for Children and Education
Sector: Public Sector and Education
Quoted Articles: Art. 35 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Swedish DPA has imposed a fine of EUR 26,500 on the Östersund Municipality's Department for Children and Education. The authority had failed to carry out a data protection impact assessment before introducing the digital school platform Google Workspace in 24 schools in the municipality.

Open original source Links to the regulator's original publication or another source.