Details:

Summary Royal President refused a request for access to personal data pursuant to Article 15 of the GDPR and disclosed personal data without the consent of the data subjects. In addition, Royal President has not taken appropriate technical or organisational measures to ensure the security of the data processed.
Link: link
Related articles:  Art. 15 GDPR, Art. 6 GDPR, Art. 32 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 2,500
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law