News

๐Ÿ‡ช๐Ÿ‡ธ Insurance company fined for safety failure โš–๏ธ๐Ÿ’ฐ

Confidentiality & Security, Tools & Documentation | 26/03/2025

Source : PS-00453-2023 ๐Ÿ”ด The Facts ๐Ÿ“… October 2022: A cyberattack ๐Ÿ’ป compromised the personal data of 1.6 million people. ๐Ÿ”“ Method: A brute force attac...

Read more

๐Ÿ‡ฎ๐Ÿ‡น Confidentiality: a doctor sends a file with his patients' data by email

Confidentiality & Security | 26/03/2025

๐Ÿšจ A doctor forgets the fundamental rules of the GDPR! ๐Ÿšจ๐Ÿ‡ฎ๐Ÿ‡น ๐Ÿ“ง Sending a patient list by email, a costly mistake! To justify a work schedule change, a d...

Read more

๐Ÿ‡ช๐Ÿ‡ธA lack of supervision in the subcontracting relationship

Subcontracting, Legal basis | 26/03/2025

๐Ÿ‡ช๐Ÿ‡ธ๐Ÿšจ Accessing Driving License Points Without Customer Consent: An Auto Insurance Company Fined ๐Ÿšจ The AEPD has imposed a €300,000 fine for illegally a...

Read more

๐Ÿ‡ฎ๐Ÿ‡น Consultation of bank accounts without legal basis

Legal basis | 26/03/2025

๐Ÿ‡ฎ๐Ÿ‡น ๐Ÿšจ A Curious Bank Employee Illicitly Accesses 6,637 Records Over 460 Days ๐Ÿ“ข Order to Inform Clients About Unauthorized Data Access Source : 1007052...

Read more

๐Ÿ‡ช๐Ÿ‡ธPrivacy: Data disclosed by mistake

Retention & Minimisation, Confidentiality & Security | 26/03/2025

๐Ÿ‡ช๐Ÿ‡ธ ๐Ÿ” Error: HR Data Displayed on a Company Bulletin Board! Source : PS 00467-2023 โŒ €70,000 Fine by the AEPD During union elections, the company INT...

Read more

๐Ÿ“ข Confidentiality: Sending an email to recipients with a non-blind copy!

Confidentiality & Security | 26/03/2025

Source: PS-00395-2023 Case of Commercial Prospecting Involving GDPR Violation ๐Ÿ“Œ Case Context: • A complaint was filed against the firm RECATALA AGRA...

Read more

๐Ÿšจ Conflict of Interest: Belgian Telecom Company Sanctioned ๐Ÿšจ

DPO | 25/03/2025

In 2020, the Belgian Data Protection Authority imposed an administrative fine of €50,000 on a Belgian telecommunications company. ๐Ÿ” Case Details The...

Read more

๐Ÿ” ๐Ÿ‡ซ๐Ÿ‡ท No Biometrics for Monitoring Employeesโ€™ Working Hours! ๐Ÿ‡ซ๐Ÿ‡ท ๐Ÿ”

Biometrics & Video Surveillance | 25/03/2025

The CNIL has fined a company €10,000 for illegal use of biometric data. Context In 2017, a company was sanctioned for installing a biometric fingerp...

Read more

๐Ÿ‘ ๐Ÿ‡ซ๐Ÿ‡ท An E-Commerce Website Fined for Excessive Data Collection ๐Ÿ‡ซ๐Ÿ‡ท๐Ÿ‘ 

Retention & Minimisation, Confidentiality & Security | 25/03/2025

๐Ÿ’ธ The CNIL has imposed a €250,000 fine ๐Ÿ’ธ Facts: As part of evaluating and training its employees, the e-commerce website recorded customer service ca...

Read more

๐Ÿ‡ต๐Ÿ‡ฑ Ban on using personal data for testing ๐Ÿ‡ต๐Ÿ‡ฑ

Subcontracting, Confidentiality & Security | 25/03/2025

The Polish DPA sanctions a data controller and its processor  Source : DKN 5130.2215.2020 ๐—™๐—ฎ๐—ฐ๐˜๐˜€ The Polish Data Protection Authority (DPA) imposed ...

Read more

๐Ÿ‡ซ๐Ÿ‡ท Exercise of the Right of Access: Medical Data ๐Ÿฉบ ๐Ÿ‡ซ๐Ÿ‡ท

Data Subject Rights | 25/03/2025

The CNIL has fined a dentist 10,000 euros. Source : SAN 2017-008 โš ๏ธ Non-transmission of a medical file within the prescribed time limits The regula...

Read more

๐Ÿ‡ซ๐Ÿ‡ท Excessive data collection by an online clairvoyance company

Retention & Minimisation, Confidentiality & Security | 25/03/2025

๐Ÿ”ฎ CNIL Fines an Online Fortune-Telling Company Source : SAN 2023-008 of June 8, 2023 Violations: ๐Ÿ›‘ EXCESSIVE DATA COLLECTION ๐Ÿ“‹ CONSENT ๐Ÿ’‰ SENSI...

Read more

Explore all our areas of expertise:

]]>