Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ)

€2,995,140

Insufficient technical and organisational measures to ensure information security

Datum för beslut

28 februari 2024

Myndighet

Hellenic Data Protection Authority (HDPA)

GR

Sektor

Transportation and Energy

Land

GR

Lag

GDPR

Status

FINAL

Beskrivning

The Hellenic DPA has imposed a fine of EUR 2,995,140 on the Hellenic Post (ΕΛΛΗΝΙΚΑ ΤΑΧΥΔΡΟΜΕΙΑ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ). The controller had suffered a data breach which resulted in personal data being accessed and later published on the Dark Web. During its investigation, the DPA found that the controller had failed to implement appropriate technical and organizational measures to prevent such an incident.

Rättsliga hänvisningar

Art. 5 (1)Art. 32

Frågor och överträdelser

Insufficient technical and organisational measures to ensure information security

Håll dig uppdaterad om efterlevnaden av sekretessreglerna

Vi respekterar din integritet. Ett e-postmeddelande per månad, ingen skräppost, avsluta prenumerationen när som helst.