Restaurant
Nicht verfügbar
Insufficient technical and organisational measures to ensure information security
Datum der Entscheidung
1. Januar 2020
Behörde
Data Protection Authority of Hamburg
DE
Sektor
Accomodation and Hospitality
Land
DE
Recht
GDPRStatus
FINALBeschreibung
In order to combat the Covid 19 pandemic, a restaurant had put out an open list in which visitors had to enter their contact data. The fact that the list was openly displayed would have made it possible for unauthorized third parties to gain access to the data.
Juristische Zitate
Art. 32
Probleme und Verstöße
Insufficient technical and organisational measures to ensure information security