Dutch Supervisory Authority for Data Protection (AP) · 24 February 2022
Dutch Foreign Ministry
Insufficient technical and organisational measures to ensure information security
Fine€565,000Fine issued
- Regulator
- Dutch Supervisory Authority for Data Protection (AP)
- Decided
- 24 February 2022
- Country
- Netherlands
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/NL/007
What happened
The Dutch DPA issued a fine of €565,000 against the Dutch Ministry of Foreign Affairs for having insufficient security measures and not providing data subjects with adequate information when processing visa applications, in violation of Article 13(1)(e), 24 and 32 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 13Information to be provided where personal data are collected from the data subject13(1)(e)Read →
- Art. 32Security of processing32(1)Read →
- Data security
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/NL/007.