Lands Authority – €5,000 Fine (Malta, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Malta's Lands Authority was fined for not securing its website, which led to over 10 gigabytes of personal data being publicly accessible online. This included sensitive information and correspondence. The case emphasizes the need for strong website security to protect personal data from being exposed.
What happened
The Lands Authority's website lacked security measures, allowing over 10 gigabytes of personal data to be publicly accessible.
Who was affected
Individuals whose sensitive information and correspondence with the Lands Authority were exposed online.
What the authority found
The Maltese authority fined the Lands Authority for failing to implement adequate security measures to protect personal data, violating GDPR.
Why this matters
This case serves as a warning to public bodies and businesses about the critical need for robust data security measures to prevent data breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
As a result of the lack of appropriate security measures on the Lands Authority website, over 10 gigabytes of personal data became easily accessible to the public via a simple google search. The majority of the leaked data contained highly-sensitive information and correspondence between individuals and the Authority itself. The Lands Authority chose not to appeal. In Malta, in the case of a breach by a public authority or body, the Data Protection Commissioner may impose an administrative fine of up to €25,000 for each violation and may additionally impose a daily fine of €25 for each day such violation persists.
Related Enforcement Actions (0)
No other enforcement actions found for Lands Authority in MT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
18 February 2019
Authority
Information and Data Protection Commissioner
Fine Amount
€5,000
About this data
Cite as: Cookie Fines. Lands Authority - Malta (2019). Retrieved from cookiefines.eu
Last updated: