EU GDPR Art 32

The incident offers a concrete scenario against which organizations can stress-test their existing programs: three steps to consider.

Information about more than two million people was hacked and leaked on darknet.

The company was fined after VDAI identified GDPR compliance weaknesses related to incident reporting and data security.

Personal data of a large part of Sweden’s population was leaked on the darknet following an attack on the company in January 2025.

The European court finally said yes to transfers of personal data from the EU to the US.

The DPC processed fewer new cases, but received an 11% increase in GDPR breach notifications.

Failure to adequately monitor the work of third-party agencies and security deficiencies of online portal lead to a €45m ($51m) fine.

The Swedish Government Agency failed to keep sensitive data contained in a web form fully secure.