The Authority has fined a Ministry for €75,000 for failing to appoint a Data Protection Officer (DPO) by 28 May 2018, the date of full application of the GDPR, and for disclosing on its institutional website the personal information of over 5,000 managers.

The sanction highlighted failings on the part of the Ministry, both in terms of substance and form, thus drawing attention to various aspects of the principle of accountability of the processor enshrined in the GDPR.

Read the judgment

Author elex

More posts by elex