Unknown – €65,000 Fine (Malta, 2022)

€65,000Information and Data Protection Commissioner1 January 2022Malta
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in Malta was fined €65,000 for mishandling sensitive personal data. The company failed to protect this data and did not notify people about data breaches. This case highlights the importance of securing personal information and promptly informing affected individuals when things go wrong.

What happened

A company mishandled sensitive personal data and failed to notify individuals about data breaches.

Who was affected

Individuals whose sensitive personal data was not properly protected and who were not informed about data breaches.

What the authority found

The Information and Data Protection Commissioner found that the company violated several GDPR rules by not securing sensitive data and failing to notify affected individuals about breaches.

Why this matters

This case underscores the critical need for companies to secure personal data and communicate transparently about breaches. Businesses should ensure they have robust data protection measures and clear breach notification processes.

GDPR Articles Cited

Art. 5(1)(f) GDPR
Art. 6(1) GDPR
Art. 9(1) GDPR
Art. 32(1) GDPR
Art. 33(1) GDPR
Art. 34(1) GDPR

Cite as: Cookie Fines. Unknown - Malta (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: