The Maltese Data Protection Authority (IDPC) ordered IT company C-PLANET to provide details on the source of personal data collected on voters within 20 days. Failure to comply will result in a proportionate and dissuasive fine under the GDPR. The decision follows complaints that C-PLANET breached Article 15 GDPR by not supplying a copy of the data and source information.
Why it matters: The enforcement underscores GDPR transparency obligations for political data processing.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
