Penalty for failure to shred files
A Czech company must pay a fine of 30,000 crowns and 1,000 crowns in procedural costs because personal data was not adequately protected.
The company disposed of loan agreements from approximately 300 clients into a public trash can. The contracts included first and last names, Social Security number, ID number, home address, phone number, and credit information.
In the opinion of the authority, the data should have been made unrecognizable (shredded or blackened) before disposal, but the company failed to do so. Therefore, the above-mentioned fine was pronounced.
Art des Verstoßes:
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
5. Principles relating to personal data processing