Asper Biogene OÜ

Ei ole saadaval

Insufficient technical and organisational measures to ensure information security

Otsuse kuupäev

10. jaanuar 2025

Ametiasutus

Estonian Data Protection Authority (AKI)

EE

Sektor

Health Care

Riik

EE

Seadus

GDPR

Staatus

FINAL

Kirjeldus

The Estonian DPA imposed a fine of EUR 85,000 on Asper Biogene OÜ. Asper Biogene OÜ suffered a data leak due to a lack of adequate security measures. The leak affected approximately 100,000 files containing personal, health and genetic data. Asper Biogene OÜ also appointed a member of the board of directors as DPO, resulting in a conflict of interest. A fine of EUR 80,000 was imposed for the inadequate security measures. The unlawful appointment of the DPO was fined EUR 5,000. ---UPDATE--- The Tartu County Court overturned the DPA's decision. The DPA has appealed against the court's decision.

Probleemid ja rikkumised

Insufficient technical and organisational measures to ensure information security

Privaatsuse jõustamise kohta ajakohastatud teave

Me austame teie privaatsust. Üks e-kiri kuus, ei ole rämpsposti, loobuda tellimusest igal ajal.