Logistics company
入手不可
Insufficient technical and organisational measures to ensure information security
決定日
2022年1月1日
権威
Data Protection Authority of Hamburg
DE
セクター
Transportation and Energy
国名
DE
法律
GDPRステータス
FINAL説明
A logistics company had disposed of delivery lists in a public waste paper container. The lists contained a large amount of detailed information, such as the first and last names of subscribers, the addresses, subscribed newspapers, and special delivery information, such as the location of mailboxes and any complaints from recipients. The DPA also noted that the company failed to inform the data subjects and the DPA of the data breach in a timely manner.
法的引用
Art. 32 (1)Art. 33Art. 32
問題と違反
Insufficient technical and organisational measures to ensure information security