Ireland 's Personal Data Protection Office ( UODO ) has levied its first fine under the National Data Protection Regulation ( GDPR ) , with a € 220,000 ( $ 246,318 ) penalty against digital marketing firm Bisnode . The fine was for breaching Article 14 data subject rights . UODO said Bisnode did not directly inform around 5.7 million people that it was using their personal data collected from the internet . In the instances we have had email addresses (679,000 addresses), there we have sent out Art. Instead , the firm posted a notice on its website , which UODO said was not a " proportionate effort " . Bisnode , which plans to appeal the decision , said it would cost around € 8 million in admin to meet its Article 14 obligations .
Ireland 's Personal Data Protection Office ( UODO ) has levied its first fine under the National Data Protection Regulation ( GDPR ) , with a € 220,000 ( $ 246,318 ) penalty against digital marketing firm Bisnode . The fine was for breaching Article 14 data subject rights . UODO said Bisnode did not directly inform around 5.7 million people that it was using their personal data collected from the internet . Instead , the firm posted a notice on its website , which UODO said was not a " proportionate effort " . Bisnode , which plans to appeal the decision , said it would cost around € 8 million in admin to meet its Article 14 obligations .