Insurance Company Description

An investigation by the CNIL revealed that the documents registered by the company's clients in their personal accounts were accessible to other people by changing the numbers at the end of the URL addresses displayed in the browser. The CNIL imposed a fine of 180,000 euros on the company for having taken inadequate security measures. In determining the amount of the fine, the CNIL took particular account of the sensitivity of the data and documents concerned (identity cards, information relating to the offences, bank details, etc.) and the number of persons concerned. Authority: CNIL - French Data Protection Autority (National Commission for Informatics and Liberties)