Shanghai Moonton Technology Co. Ltd.

What happened

The DPA fined a videogame company €90,000 for its use of forum moderators without proper data minimisation or security measures limiting their access to personal data. The controller paid a reduced fine of €72,000 in accordance with national law.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(c) · 5(1)(f)Read →
• Art. 27Representatives of controllers or processors not established in the UnionRead →
• Art. 32Security of processingRead →
• Art. 33Notification of a personal data breach to the supervisory authorityRead →

• Data breach
• Data principles
• Data security