The company was fined after VDAI identified GDPR compliance weaknesses related to incident reporting and data security.
EU GDPR Art 32
Personal data of a large part of Sweden's population was leaked on the darknet following an attack on the company in January 2025.
The European court finally said yes to transfers of personal data from the EU to the US.
The DPC processed fewer new cases, but received an 11% increase in GDPR breach notifications.
Failure to adequately monitor the work of third-party agencies and security deficiencies of online portal lead to a €45m ($51m) fine.
The Swedish Government Agency failed to keep sensitive data contained in a web form fully secure.
We spoke about: CrowdStrike outage, Ashley Madison data breach, prevalence of cyberattacks, government oversight and regulation.
Meta Ireland stored social media users passwords in ‘plaintext’ without encryption.