The Court of Justice of the European Union issued a ruling stating data protection authorities are not obligated to render a fine or order corrective action following a data breach if the controller has taken remedial actions. The case originated after a German bank employee accessed a customer’s personal data without being authorized, however, the employee testified that she neither copied the customer’s data nor sold it to a third party.
Full story