Lands Authority – €5,000 Fine (Malta, 2019)

€5,000Information and Data Protection Commissioner18 February 2019Malta
appealed
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Malta's Lands Authority was fined for not securing its website, which led to over 10 gigabytes of personal data being publicly accessible online. This included sensitive information and correspondence. The case emphasizes the need for strong website security to protect personal data from being exposed.

What happened

The Lands Authority's website lacked security measures, allowing over 10 gigabytes of personal data to be publicly accessible.

Who was affected

Individuals whose sensitive information and correspondence with the Lands Authority were exposed online.

What the authority found

The Maltese authority fined the Lands Authority for failing to implement adequate security measures to protect personal data, violating GDPR.

Why this matters

This case serves as a warning to public bodies and businesses about the critical need for robust data security measures to prevent data breaches.

GDPR Articles Cited

Art. 5 GDPR
Art. 32 GDPR
Full Legal Summary
Detailed

As a result of the lack of appropriate security measures on the Lands Authority website, over 10 gigabytes of personal data became easily accessible to the public via a simple google search. The majority of the leaked data contained highly-sensitive information and correspondence between individuals and the Authority itself. The Lands Authority chose not to appeal. In Malta, in the case of a breach by a public authority or body, the Data Protection Commissioner may impose an administrative fine of up to €25,000 for each violation and may additionally impose a daily fine of €25 for each day such violation persists.

Related Enforcement Actions (0)

No other enforcement actions found for Lands Authority in MT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

18 February 2019

Authority

Information and Data Protection Commissioner

Fine Amount

€5,000

Enforcement Tracker ID

ETid-41

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Lands Authority - Malta (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: