Provider of social services - Retirement home
- Country
- Czech Republic
- Fine
- 50,000 CZK
- Date
- 2019
- Sector
- -
- Articles
- Art. 5 (1), (2)Art. 6 (1)Art. 9 (1)Art. 12 (1)Art. 13Art. 24Art. 25Art. 30 GDPR
Insufficient legal basis for data processing and insufficient technical and organisational measures to ensure information security
The controller was unlawfully processing special categories of personal data and birth number as well as did not ensure an adequate level of security of such personal data.