President of the Zgierz District Court

€2,200

Insufficient technical and organisational measures to ensure information security

Ngày ra quyết định

13 tháng 8, 2021

Thẩm quyền

Polish National Personal Data Protection Office (UODO)

PL

Ngành

Public Sector and Education

Quốc gia

PL

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Polish DPA (UODO) has imposed a fine of EUR 2,200 on the president of the Zgierz District Court. The president had reported a data breach involving the loss of an unencrypted USB stick by a probation officer. The data medium stored the data of 400 persons under probation supervision. The lost and at the same time unsecured data carrier has not yet been found, so that unauthorized persons could still have access to the personal data it contained. The president had assumed that the duty to secure the data did not lie with himself, but with the respective probation officers who had these data in use. However, the DPA found that the president himself should have secured the USB sticks.

Trích dẫn pháp lý

Art. 5 (1)Art. 25 (1)Art. 32 (1)

Vấn đề & Vi phạm

Insufficient technical and organisational measures to ensure information security

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.