The Malta Information & Data Protection Commissioner (IDPC) imposed a €65,000 fine on IT company C-Planet for unlawfully collecting personal data of 98% of Maltese voters, including political preferences. The IDPC found the processing lacked a legal basis under GDPR Articles 6 and 9, and the company failed to implement adequate security measures or notify the breach.
Why it matters: The enforcement highlights the high risk and penalties for unlawful processing of sensitive political data under the GDPR.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
