Sanction RGPD Data Protection Commissioner of Malta — Lands Authority : 5 k€ (2019)
- Autorité de contrôle
- Data Protection Commissioner of Malta
- Pays
- Malte
- Entreprise / secteur
- Lands Authority
- Montant de l'amende
- 5 k€
- Date de la décision
- 18 février 2019
- Fondement juridique
- Art. 5, Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
As a result of the lack of appropriate security measures on the Lands Authority website, over 10 gigabytes of personal data became easily accessible to the public via a simple google search. The majority of the leaked data contained highly-sensitive information and correspondence between individuals and the Authority itself. The Lands Authority chose not to appeal. In Malta, in the case of a breach by a public authority or body, the Data Protection Commissioner may impose an administrative fine of up to €25,000 for each violation and may additionally impose a daily fine of €25 for each day such violation persists.