Dutch Supervisory Authority for Data Protection (AP) · 31 May 2021
UWV (Dutch employee insurance service provider)
Insufficient technical and organisational measures to ensure information security
- Regulator
- Dutch Supervisory Authority for Data Protection (AP)
- Decided
- 31 May 2021
- Country
- Netherlands
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/NL/011
What happened
The Dutch DPA fined an administrative agency responsible for providing employment benefits €450,000 for failing to adequately secure personal data, including special categories of data, in messages that were erroneously sent to the wrong recipients on its website. Although the agency took certain organisational measures to secure user data, technical measures were only implemented after nine data security breaches affecting 15,000 individuals.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/NL/011.