KEPIDES
€6,000
Insufficient technical and organisational measures to ensure information security
결정 날짜
2021년 3월 3일
권한
Cypriot Data Protection Commissioner
CY
섹터
Real Estate
국가
CY
법률
GDPR상태
FINAL설명
The Cypriot DPA imposed a fine of EUR 6,000 against KEPIDES (real estate company). The controller had submitted a list of buyers of the properties it manages to a parliamentary committee. However, the controller had failed to anonymize the list, as a result of which the names of the data subjects were transmitted.
법적 인용
Art. 32 (4)
문제 및 위반 사항
Insufficient technical and organisational measures to ensure information security