Court orders European Commission to pay its first-ever GDPR fine

Summary: The European General Court has fined the European Commission for breaching EU data privacy rules by transferring a German citizen’s personal data to the U.S. without adequate protections. This ruling marks a significant precedent in enforcing the General Data Privacy Regulation (GDPR).

Threat Actor: European Commission | European Commission
Victim: German citizen | German citizen

Key Point :

• The court fined the European Commission €400 for violating GDPR.
• The breach occurred when personal data was transferred to the U.S. after a conference registration via Facebook.
• This case is notable as it is the first instance of the European Commission being penalized for such a violation.