Proximus SA

€50,000

Insufficient involvement of data protection officer

Fecha de la decisión

28 de abril de 2020

Autoridad

Belgian Data Protection Authority (APD)

BE

Sector

Media, Telecoms and Broadcasting

País

BE

Ley

GDPR

Estado

FINAL

Descripción

According to the data protection authority, the company's data protection officer was not sufficiently involved in the processing of personal data breaches and the company did not have a system in place to prevent a conflict of interest of the DPO, who also held numerous other positions within the company (head of compliance and audit department), which led the DPA to the conclusion that the company's DPO was not able to work independently.

Citas legales

Art. 31Art. 58Art. 37

Problemas e infracciones

Insufficient involvement of data protection officer

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.