Tietosuojavaltuutetun toimisto (Finland) · 23 March 2022
Finnish Ministry of Foreign Affairs
About: Data breach
- Regulator
- Tietosuojavaltuutetun toimisto (Finland)
- Decided
- 23 March 2022
- Country
- Finland
- Sector
- Not given
- Regulator’s reference
- 2437/161/22
- Fino case number
- 2022/FI/007
What happened
The Finnish DPA issued a reprimand against the Ministry of Foreign Affairs for the late notification of a data breach to both the DPA and the data subjects under Articles 33 and 34 GDPR. The DPA held that although controllers can investigate potential data breaches before the 72-hour time limit in Article 33 GDPR starts running, the Ministry failed to do so after it had concluded its investigation, without providing justified reasons for the delay.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 33Notification of a personal data breach to the supervisory authorityRead →
- Art. 34Communication of a personal data breach to the data subjectRead →
- Art. 58Powers58(2)(b)Read →
- Data breach
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/FI/007.