Enforcing jurisdiction
Malta · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Unknown – €65,000 Fine (Malta, 2022)

€65,000Information and Data Protection Commissioner1 January 2022Malta
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A company in Malta was fined for mishandling sensitive personal data of many people. This matters because it highlights the importance of properly protecting personal information under GDPR rules.

What happened

The company violated several GDPR regulations related to special categories of personal data.

Who was affected

Numerous individuals whose sensitive personal data was mishandled by the company were affected.

What the authority found

The Information and Data Protection Commissioner found that the company failed to comply with GDPR requirements for handling special categories of personal data.

Why this matters

This case emphasizes the need for businesses to ensure they have strong protections in place for sensitive data. Companies should regularly review their data handling practices to avoid similar penalties.

Recorded legal citations
Automatically processed
Art. 5(1)(f) GDPR
Art. 6(1) GDPR
Art. 9(1) GDPR
Art. 32(1) GDPR
Art. 33(1) GDPR
Art. 34(1) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 6(1) GDPR
Art. 9(1) GDPR
(2) GDPR
Art. 32(1) GDPR
Art. 33(1) GDPR
Art. 34(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Malta enforcementInformation and Data Protection Commissioner actionsAll Unknown actions
Full Legal Summary
Detailed

The controller has violated numerous GDPR regulations, involving special categories of personal data of numerous individuals.

Related Enforcement Actions (4)

Other enforcement actions involving Unknown in MT

Fine
Jan 2020· Information and Data Protection Commissioner

The controller has unlawfully disclosed personal data of a data subject.

€5K
Fine
Jan 2020· Information and Data Protection Commissioner

Insufficient technical and organisational measures to ensure information security

€3K
Fine
Jan 2022· Information and Data Protection Commissioner

The controller has failed to implement appropriate technical and organizational measures to protect personal data.

€250K
Fine
Jan 2022· Information and Data Protection Commissioner

The controller has unlawfully disclosed personal data of a data subject.

€3K
Current
Jan 2022

Fine

€65K

Details

Fine Date

1 January 2022

Authority

Information and Data Protection Commissioner

Fine Amount

€65,000

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Unknown - Malta (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: