“If the cedar trees have caught on fire,” says an old Hebrew adage, “what shall the shrubs on the wall say?”
Denmark data protection authority Datatilsynet suffered a data breach when its own documents, which should have been shredded, were disposed of in the normal wastepaper bin. The agency notified itself of the breach per Article 33 of the General Data Protection Regulation, but 24 hours after the 72 hours required by law.