Logistics company
사용 불가
Insufficient technical and organisational measures to ensure information security
결정 날짜
2022년 1월 1일
권한
Data Protection Authority of Hamburg
DE
섹터
Transportation and Energy
국가
DE
법률
GDPR상태
FINAL설명
A logistics company had disposed of delivery lists in a public waste paper container. The lists contained a large amount of detailed information, such as the first and last names of subscribers, the addresses, subscribed newspapers, and special delivery information, such as the location of mailboxes and any complaints from recipients. The DPA also noted that the company failed to inform the data subjects and the DPA of the data breach in a timely manner.
법적 인용
Art. 32 (1)Art. 33Art. 32
문제 및 위반 사항
Insufficient technical and organisational measures to ensure information security