Setúbal municipality – €180,000 Fine (Portugal, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Setúbal municipality was fined €180,000 for mishandling personal data of Ukrainian refugees. This case shows that organizations must inform people about data use and protect their information properly.
What happened
Setúbal municipality collected personal data from Ukrainian refugees without properly informing them or securing the data.
Who was affected
Ukrainian refugees who were asked to provide personal information upon arrival.
What the authority found
The Portuguese DPA found that Setúbal municipality failed to inform refugees about data processing and didn't protect their data adequately.
Why this matters
The ruling emphasizes the need for transparency and security in handling personal data, especially for vulnerable groups. Organizations should ensure they communicate clearly about data use and implement strong data protection measures.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Portuguese DPA has imposed a fine of EUR 170,000 on Setúbal municipality. The DPA found data protection violations regarding the collection of personal data from Ukrainian refugees. The municipality had asked refugees to fill out a form at the time of their arrival and provide various details on personal data, such as name, date of birth, marital status, etc. The DPA noted, that the municipality had not sufficiently informed the data subjects about the data processing. In addition, the DPA found that the municipality had failed to implement sufficient technical and organizational to protect personal data, as well as to define a retention period for the data. The municipality had also failed to appoint a data protection officer.
Related Enforcement Actions (0)
No other enforcement actions found for Setúbal municipality in PT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 November 2022
Authority
Comissão Nacional de Proteção de Dados
Fine Amount
€180,000
Enforcement Tracker ID
ETid-1498
About this data
Cite as: Cookie Fines. Setúbal municipality - Portugal (2022). Retrieved from cookiefines.eu
Last updated: