On Sept. 10, Poland's data protection authority, the Personal Data Protection Office, issued its highest fine of 660,000 euros to retail company Morele.net for infringing on the principle of integrity and confidentiality and the rules on security of processing under the EU General Data Protection Regulation. In this piece for Privacy Tracker, Womble Bond Dickinson Associate Anna Rawlinson, CIPP/E, looks at the key takeaways from the decision, including the UODO's interpretation of “the state of the art,” which, under the GDPR, needs to be considered when implementing technical and organizational measures appropriate to the risk of processing.
Full Story