Swedish DPA fines Miljödata i Karlskrona EUR 160,000 for insufficient security
The Swedish DPA fined IT service provider Miljödata i Karlskrona SEK 1,800,000 (approx. EUR 160,000) for violating GDPR Article 32(1) after a cyberattack exposed personal data of 2.2 million individuals. The company failed to maintain adequate technical and organizational security measures.
- Framework
- GDPR
- Who it concerns
- Miljödata i Karlskrona, an IT service provider.
What changed?
Each point with the sentence from the source that says it.
The Swedish DPA found that Miljödata did not maintain a sufficiently high level of technical and organizational security, given the types of personal data it processed.
The review shows that the company did not maintain a sufficiently high level of technical and organizational security, given the types of personal data it processed.
Miljödata failed to conduct adequate checks when installing new software.
Miljödata failed to conduct adequate checks when installing new software
Miljödata did not have automated real-time monitoring of its systems to detect intrusions or suspicious activity.
and did not have automated real-time monitoring of its systems to detect intrusions or suspicious activity.
The Swedish DPA imposed an administrative fine of SEK 1,800,000 (approximately EUR 160,000) for violating Article 32(1) GDPR.
IMY, the Swedish Data Protection Authority, assesses that Miljödata acted negligently and has therefore decided to impose an administrative fine of SEK 1 800 000 (approximately EUR 160 000) for violating Article 32(1) GDPR.
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- Data Protection Policy
Review the Data Protection Policy to ensure it includes requirements for adequate technical and organizational security measures, including checks when installing new software and automated real-time monitoring of systems.