Back to Cases
technologypublic_sector · 2024
AMA - Agência para a Modernização Administrativa
CNPD criticized a public digital-services operator for privacy-by-design shortcomings in citizen self-service workflows, engaging GDPR Articles 25 and 32.
Fine Imposed€110,000.0
Authority
Comissão Nacional de Proteção de Dados
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Citizen portals must be privacy-tested before rollout, especially where identity data is centralized.