Cyfrowy Polsat S.A.

€245,000

Insufficient technical and organisational measures to ensure information security

결정 날짜

2021년 4월 22일

권한

Polish Data Protection Authority (UODO)

PL

섹터

Media, Telecoms and Broadcasting

국가

PL

법률

GDPR

상태

FINAL

설명

The Polish DPA (UODO) has fined Cyfrowy Polsat S.A. EUR 245,000. The fine was based on a large number of data breaches reported by the controller to the DPA. Frequently, postal correspondence containing personal data was lost or delivered to the wrong recipient. The DPA notes that although the data breaches were caused by the courier company contracted by the controller, the controller had to ensure that such breaches did not occur. The controller failed to implement technical and organizational measures appropriate to the risk to protect the processing of the data. Furthermore, the controller did not notify the data subjects about the data breaches until two to three months later.

법적 인용

Art. 24 (1)Art. 32 (1)Art. 34 (1)

문제 및 위반 사항

Insufficient technical and organisational measures to ensure information security

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.