Dutch Supervisory Authority for Data Protection (AP) · 16 June 2020
PVV Overijssel
Insufficient fulfilment of data breach notification obligations
Fine€7,500Fine issued
- Regulator
- Dutch Supervisory Authority for Data Protection (AP)
- Decided
- 16 June 2020
- Country
- Netherlands
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/NL/009
What happened
The Dutch DPA fined a provincial political party €7,500 for the unauthorised disclosure of a mailing list containing 101 email addresses, and for failing to notify this breach to the DPA. The email addresses constituted special category data revealing political party opinions.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data breach
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NL/009.