The Netherlands

Arnhem and Nijmegen University of Applied Sciences

175,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2025-12-15.

Rank · Sector

#34

of 357 in Public Sector and Education

Rank · The Netherlands

#23

of 43

Rank · All fines

#392

of 3,050

Case details

Authority: Dutch Supervisory Authority for Data Protection (AP)
Date: 2025-12-15
Controller / Processor: Arnhem and Nijmegen University of Applied Sciences
Sector: Public Sector and Education
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Dutch DPA has imposed a fine of EUR 175,000 on Arnhem and Nijmegen University of Applied Sciences. The controller suffered a data breach due to insufficient technical and organisational measures.

Open original source Links to the regulator's original publication or another source.