Universal Life Insurance Public Co Ltd.

€3,500

Insufficient data processing agreement

Datum för beslut

1 januari 2022

Myndighet

Cypriot Data Protection Commissioner

CY

Sektor

Finance, Insurance and Consulting

Land

CY

Lag

GDPR

Status

FINAL

Beskrivning

The Cypriot DPA has imposed a fine of EUR 3,500 on Universal Life Insurance Public Co Ltd. The processor of the data controller had suffered a data breach in which personal data of customers were mistakenly disclosed to other customers. During its investigation, the DPA found that the controller had failed to contractually regulate the relationship with its processor. The DPA concluded that the controller had contracted a processor without ensuring that the processor provided sufficient guarantees for the implementation of appropriate technical and organizational measures to protect personal data.

Rättsliga hänvisningar

Art. 24 (1)Art. 28 (1)

Frågor och överträdelser

Insufficient data processing agreement

Håll dig uppdaterad om efterlevnaden av sekretessreglerna

Vi respekterar din integritet. Ett e-postmeddelande per månad, ingen skräppost, avsluta prenumerationen när som helst.