The UK’s data protection authority, the ICO, received 13 complaints about unsolicited SMS advertisements related to the marketing of car insurance and, as a result, launched the investigation into Tempcover Ltd. Following the investigation, the ICO found that Tempcover Ltd had sent a total of 29,970,419 promotional text messages between May 26, 2019 and May… […]
675,478 Advertising calls despite objection in the TPS register
After a total of 69 complaints about unsolicited advertising calls for insulation work, were received by the UK’s data protection authority ICO and the UK TPS register, the authority launched the investigation against Home2sense Limited. A DPA investigation found that between June 23, 2020 and March 31, 2021, the company had made a total of… […]
Advertising calls despite objection in the TPS register
Energy Suite Limited was targeted by the UK’s data protection authority, the ICO, after the company received four complaints about unsolicited commercial calls that were also registered on the UK TPS register. During the investigation, the DPA determined that the fine recipient had made approximately 15,000 solicitation calls between March 1, 2019 and November 13,… […]
Unauthorized recording on toilet facility
As a result of a tip from the provincial police directorate, the data protection authority discovered that the operator of a public toilet facility had been operating a covertly installed video camera in one of the toilet cubicles. The camera was used for nine to twelve hours on three different days between June 1, 2020… […]
Disregard of the duty to inform after data theft
A former employee of Magdeburg University Hospital is suspected of having accessed and passed on personal address and registration data without authorization via her official access, possibly for politically motivated reasons. The terminated employee is assigned to the left-wing extremist scene. The data concerned is said to contain mainly registration data of persons close to… […]
Corona contact sheet disposal in the forest
A restaurateur in Baden-Württemberg disposed of a bag of Corona contact sheets in the forest. At that time, the data was required to be deleted after four weeks under the applicable Corona tracking provisions. Disposing of forms in nature is an inappropriate use of customer data. In response, the data protection authority imposed a fine… […]
personnel plan according to vaccination status
An unidentified company has been cited for inappropriate handling of its employees’ health information in regards to the Corona pandemic. The company collected information on the vaccination status of its employees and, with the influence of the vaccination status, created an personnel plan in which a color system showed which vaccination protection was present in… […]
Improper disposal of customer data and unlawful video surveillance
After the data protection authority received a tip about unauthorized data processing at a pharmacy, investigations were carried out at the pharmacy. During the investigation, numerous records and documents were found in a garbage room, which contained personal data of the special category. The garbage room in which they were stored could be easily entered… […]
Covid-19 test results viewable without authentication
A Covid-19 test center was fined after sending unencrypted emails with URLs to affected individuals. The URLs allowed access to test results with no further authentication required. In some cases, the URLs were structured in such a way that PDF files were downloaded which contained the last name of the tested person in the file… […]