Payment service provider UAB MisterTango

€61,500

Insufficient fulfilment of data breach notification obligations

결정 날짜

2019년 5월 16일

권한

Lithuanian Data Protection Authority (VDAI)

LT

섹터

Finance, Insurance and Consulting

국가

LT

법률

GDPR

상태

FINAL

설명

During an inspection, the Lithuanian Data Protection Supervisory Authority found that the controller processed more data than necessary to achieve the purposes for which he was a controller. In addition, it became known that from 09 - 10 July 2018 payment data were publicly available on the internet due to inadequate technical and organisational measures. 9,000 payments with 12 banks from different countries were affected. According to the supervisory authority, a data breach notification pursuant to Art. 33 GDPR would have been necessary. The controller did not report the Data Breach.

법적 인용

Art. 5Art. 32Art. 33

문제 및 위반 사항

Insufficient fulfilment of data breach notification obligations

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.