Notification system without implementing appropriate technical and organisational measures to ensure that by default only the personal data needed for the purpose of treatment are treated.

The City Council practiced notifications to citizens of the municipality without applying any protective measures that would prevent access to the contents of the document to notify, so that the notifier agent could access the full content of the notification. Also, to accredit the practice of the notification provided the notifier agent with a copy of the document to notify that the recipient had to sign.