Unknown
€25,000
Insufficient technical and organisational measures to ensure information security
決定日期
2021年1月22日
權限
Belgian Data Protection Authority (APD)
BE
部門
Not assigned
國家
CZ
法律
GDPR狀態
FINAL說明
The Belgian DPA fined a mobile operator EUR 25,000. The controller had assigned the data subject's phone number to an unauthorized third party, causing the data subject to lose access to his/her phone number. As the SIM card of the data subject had been deactivated, that would have allowed the third party to access various personal data of the data subject in the period between September 16 and September 19, 2019, such as call history and accounts of various services (e.g. Paypal, WhatsApp and Facebook) associated with the number.
法律引文
Art. 5 (1)Art. 24Art. 32Art. 33 (1)Art. 34 (1)
問題與違規
Insufficient technical and organisational measures to ensure information security