Enforcements in the Travel Industry - Booking.com

Booking.com was found in breach of GDPR Art. 33 Breach Notification requirement as they notified the regulator 3 weeks after becoming aware of an incident. The GDPR requires that notification to the regulator is done within 72 hours. As a result, the Dutch Data Protection Authority  (Autoriteit Persoonsgegevens, or ‘AP’) announced its decision in March 2021 to fine  Booking.com 475,000 euros for failing to report a data breach within the mandated timeframe of 72 hours,

Share this video


Unlock these benefits
globe

Get access to news, enforcement cases, events, and actionable tips and guides

email

Get regular email updates and offers

job

Job opportunities, mentorship and career guidance

discuss

Exclusive access to Data Protection community - ask questions, network and share knowledge with peers and experts via WhatsApp and Linkedin

Related Videos