The PDPL enforcement authority has announced its first significant penalty against a major organization for data protection violations.