Details:

Summary The organization sent a letter with abuse allegations to a third party who then uploaded it to social networks.
Link: link
Related articles:  Art. 33 GDPR
Type: Insufficient fulfilment of data breach notification obligations
Fine: EUR 40,000
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law