Central Young Men’s Christian Association
€8,700
Insufficient technical and organisational measures to ensure information security
วันที่ตัดสินใจ
30 เมษายน 2567
อำนาจ
Information Commissioner (ICO)
GB
ภาคส่วน
Individuals and Private Associations
ประเทศ
GB
กฎหมาย
GDPRสถานะ
FINALคำอธิบาย
The UK DPA (ICO) has fined the Central Young Men’s Christian Association EUR 8,700. The controller had sent an email to individuals participating in a program for individuals suffering from HIV without using the blind copy option, which made the email addresses of all recipients known to other recipients. 166 individuals could be identified or potentially identified based on their email addresses. From this it could be concluded that these people were probably living with HIV.
การอ้างอิงทางกฎหมาย
Art. 5 (1)Art. 32 (1)
ปัญหาและการละเมิด
Insufficient technical and organisational measures to ensure information security