The Netherlands data protection authority, Autoriteit Persoonsgegevens, announced a fine for credit card company International Card Services. The AP fined the company 150,000 euros for allegedly not conducting a data protection impact assessment before processing the personal data of 1.5 million customers.