Cyfrowy Polsat S.A.

€245,000

Insufficient technical and organisational measures to ensure information security

Ημερομηνία απόφασης

22 Απριλίου 2021

Αρχή

Polish Data Protection Authority (UODO)

PL

Τομέας

Media, Telecoms and Broadcasting

Χώρα

PL

Νόμος

GDPR

Κατάσταση

FINAL

Περιγραφή

The Polish DPA (UODO) has fined Cyfrowy Polsat S.A. EUR 245,000. The fine was based on a large number of data breaches reported by the controller to the DPA. Frequently, postal correspondence containing personal data was lost or delivered to the wrong recipient. The DPA notes that although the data breaches were caused by the courier company contracted by the controller, the controller had to ensure that such breaches did not occur. The controller failed to implement technical and organizational measures appropriate to the risk to protect the processing of the data. Furthermore, the controller did not notify the data subjects about the data breaches until two to three months later.

Νομικές παραπομπές

Art. 24 (1)Art. 32 (1)Art. 34 (1)

Θέματα & Παραβάσεις

Insufficient technical and organisational measures to ensure information security

Μείνετε ενημερωμένοι για την επιβολή του απορρήτου

Σεβόμαστε την ιδιωτικότητά σας. Ένα email ανά μήνα, χωρίς spam, διαγραφή ανά πάσα στιγμή.