- Published
- Source
- European Data Protection Board Official
- Filed under
- Privacy, Regulation
Background information Date of final decision: 22/09/2026 National case Legal Reference(s): Article 32 (Security of processing) Decision: Administrative fine Website topics: Cybersecurity, personal data breaches Summary of the Decision Origin of the case In August 2025, the IT service provider Miljödata was targeted in a cyberattack, during which a malicious actor gained access to a…
What it means for organisations
- Know what personal data you hold, where it lives and who can reach it – most obligations start there.
- Collect only what you need, and be able to say why you hold it and for how long.
- Report a serious personal data breach to the ICO within 72 hours of becoming aware of it.
MyCyberWay training
Microsoft SC-401 exam training
Data protection is a security job too.
Tutor-led SC-401 preparation: classify and label sensitive information with Microsoft Purview, prevent leaks with DLP, keep and dispose of data with retention, and investigate insider risk – including data used by AI tools.
- Sensitivity labels and DLP
- Retention and eDiscovery
- Insider risk and DSPM for AI
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
