Penalty for failure to shred files

Penalty for failure to shred files

A Czech company must pay a fine of 30,000 crowns and 1,000 crowns in procedural costs because personal data was not adequately protected.

The company disposed of loan agreements from approximately 300 clients into a public trash can. The contracts included first and last names, Social Security number, ID number, home address, phone number, and credit information.

In the opinion of the authority, the data should have been made unrecognizable (shredded or blackened) before disposal, but the company failed to do so. Therefore, the above-mentioned fine was pronounced.

Entscheidungsdatum:
04.02.2019

Land:
Czech Republic

Art des Verstoßes:
technical deficiency

Betroffene Datensätze:
300

Waren sensible Daten betroffen?:
No

verhängte Geldstrafe:
€ 1,200,-

Quelle:
Decision of the Czech Data Protection Authority (Czech)