Finland: Deputy Ombudsman fines Kymen Vesi Oy €16,000 for GDPR violations
The Office of the Data Protection Ombudsman ('the Ombudsman') announced, on 22 May 2020, that the Deputy Data Protection Ombudsman ('the Deputy Ombudsman'), had issued a decision ('the Decision') in which it fined Kymen Vesi Oy €16,000 for failing to undertake a Data Protection Impact Assessment ('DPIA') . In particular, the Decision relates to Kymen Vesi's processing of the location data of its employees by tracking vehicles with a vehicle information system without completing a DPIA before such processing had taken place.
Update (29 May 2020)
EDPB issues statement on Deputy Ombudsman Kymen Vesi fine
The European Data Protection Board ('EDPB') issued, on 27 May 2020, a statement ('the Statement') on the Deputy Ombudsman's decision to fine Kymen Vesi.
You can read the Statement here.