Back to Explorer
GDPRTelecommunicationsHigh Severity

KPN B.V.

€750,000

Authority

AP

Country

Netherlands

Date Issued

December 3, 2021

Industry

Telecommunications

Summary

KPN inadequately secured customer data and failed to properly document legal basis for processing personal data of millions of subscribers.

Violation Types

SecurityData BreachLegal Basis

Articles Violated

Art. 32 GDPRArt. 33 GDPR

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert