Υπουργείο Κοινωνικής Συνοχής και Οικογένειας

What happened

The DPA fined the controller €200,000 and the processor €150,000, after a large-scale data breach affecting 2,500,700 data subjects occurred due to outdated information systems, and inadequate security measures.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(f)Read →
• Art. 28Processor28(3)Read →
• Art. 32Security of processingRead →

• Data principles
• Data security
• Processor obligations