It is not GDPR but a previous local law that has been used since GDPR was not applicable in 2016 when the breach did occur.
It is not GDPR but a previous local law that has been used since GDPR was not applicable in 2016 when the breach did occur.