Penalty for missing file shredding
A Czech company has to pay a fine of CZK 30,000 plus CZK 1,000 procedural costs, as personal data has not been sufficiently protected.
The company disposed of loan contracts from about 300 clients in a public garbage bin. The contracts included, among others, first and last name, social security number, ID number, home address, telephone number and credit information.
In the opinion of the authority the data had to be made unrecognizable before the disposal (file shredder or blackening), which the enterprise omitted however. Therefore, the above fine was pronounced.
Type of Issue:
Number of involved data records:
Special category of data involved:
Violation of GDPR Paragraph:
5. Principles relating to personal data processing