Enforcing jurisdiction
Malta · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Lands Authority – €5,000 Fine (Malta, 2019)

€5,000Information and Data Protection Commissioner18 February 2019Malta
appealed
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Malta's Lands Authority faced a fine because its website had poor security, allowing over 10 gigabytes of personal data to be easily found online. This included sensitive information that should have been protected. The case highlights the importance of strong security measures for any organization handling personal data.

What happened

The Lands Authority failed to secure its website, exposing over 10 gigabytes of personal data to the public.

Who was affected

Individuals whose personal data was leaked due to the Lands Authority's inadequate website security.

What the authority found

The Information and Data Protection Commissioner fined the Lands Authority for not having appropriate security measures, violating GDPR's requirements for data protection.

Why this matters

This ruling emphasizes that organizations must take data security seriously to protect personal information. It serves as a warning for all businesses to implement robust security practices.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 32 GDPR
View original scraped data
Art. 5(GDPR)
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

As a result of the lack of appropriate security measures on the Lands Authority website, over 10 gigabytes of personal data became easily accessible to the public via a simple google search. The majority of the leaked data contained highly-sensitive information and correspondence between individuals and the Authority itself. The Lands Authority chose not to appeal. In Malta, in the case of a breach by a public authority or body, the Data Protection Commissioner may impose an administrative fine of up to €25,000 for each violation and may additionally impose a daily fine of €25 for each day such violation persists.

Related Enforcement Actions (0)

No other enforcement actions found for Lands Authority in MT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

18 February 2019

Authority

Information and Data Protection Commissioner

Fine Amount

€5,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Lands Authority - Malta (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: