Lost documentation as a result of the lack of adequate security measures.

It is decided to sanction FMB S.A. because the lack of implementation of appropriate technical and organisational measures has prevented it from locating the personal file of the person who provided services to the complained company. This fact violates Article 32.1 of the GDPR, which provides for the controller's obligation to guarantee the availability and security of personal data.