Back to Cases
technologypublic_sector · 2021
Municipality of Lisbon
CNPD fined Lisbon's municipality after personal data of political activists was shared with foreign embassies without lawful basis, implicating GDPR Articles 5, 6 and 32.
Fine Imposed€1.3M
Authority
Comissão Nacional de Proteção de Dados
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Municipal event and protest data cannot be repurposed for diplomatic sharing without clear legal basis.