Ireland’s Data Protection Commission fined Twitter 450,000 for failing to notify the DPC of a breach. Breach was caused by a four-year-old bug in the Twitter Android app responsible for the inadvertent exposure of protected accounts’ private tweets. EU data regulators can impose maximum fines of up to 20 million (about $24.3 million) or 4% of the infringing company’s annual global turnover whichever is greater for violations. Twitter said today that it worked closely with the Irish DPC during the investigation.
Source: https://www.bleepingcomputer.com/news/technology/twitter-fined-by-eu-data-protection-watchdog-for-gdpr-breach/