Restaurant
Non disponible
Insufficient technical and organisational measures to ensure information security
Date de décision
1 janvier 2020
Autorité
Data Protection Authority of Hamburg
DE
Secteur
Accomodation and Hospitality
Pays
DE
Droit
GDPRStatut
FINALDescription
In order to combat the Covid 19 pandemic, a restaurant had put out an open list in which visitors had to enter their contact data. The fact that the list was openly displayed would have made it possible for unauthorized third parties to gain access to the data.
Citations légales
Art. 32
Questions et violations
Insufficient technical and organisational measures to ensure information security