Penalty for missing file shredding
A Czech company has to pay a fine of CZK 30,000 plus CZK 1,000 procedural costs, as personal data has not been sufficiently protected.
The company disposed of loan contracts from about 300 clients in a public garbage bin. The contracts included, among others, first and last name, social security number, ID number, home address, telephone number and credit information.
In the opinion of the authority the data had to be made unrecognizable before the disposal (file shredder or blackening), which the enterprise omitted however. Therefore, the above fine was pronounced.
Entscheidungsdatum:
04.02.2019
Land:
Czech Republic
Art des Verstoßes:
technical deficiency
Betroffene Datensätze:
300
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 1,200,-
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
Quelle: