Sweden

National Government Service Centre (NGSC)

18,700 €

GDPR enforcement action by Data Protection Authority of Sweden (Integritetsskyddsmyndigheten) on 2020-04-29.

Rank · Sector

#133

of 357 in Public Sector and Education

Rank · Sweden

#37

of 46

Rank · All fines

#1,121

of 3,050

Case details

Authority: Data Protection Authority of Sweden (Integritetsskyddsmyndigheten)
Date: 2020-04-29
Controller / Processor: National Government Service Centre (NGSC)
Sector: Public Sector and Education
Quoted Articles: Art. 33 GDPR, Art. 34 GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The DPA's decision shows that it took almost five months for the company to notify the data subjects of a data breach and almost three months for the DPA to receive a notification of a data breach concerning an security lack of IT systems of the company.

Open original source Links to the regulator's original publication or another source.