Portuguese Data Protection Authority fines the National Institute of Statistics € 4.3 million
On 2 November 2022, the Portuguese Data Protection Authority (CNPD) issued a Decision imposing a fine of € 4,300,000 to the National Institute of Statistics (INE) for multiple violations in the processing of data subjects’ sensitive data during the Census 2021.
On the 27th of April 2021, after launching an investigation into the transfer of personal data from INE to Cloudflare (a U.S. service provider engaged by INE for the operation of the Census 2021 surveys), CNPD ordered the suspension of any transfer of personal data resulting from the Census 2021 surveys to the United States or other third countries without an adequate level of protection.
This decision may be appealed to the judicial courts.
