Social Insurance Agency in Slovakia
- Country
- Slovakia
- Fine
- 50,000 EUR
- Date
- 2019-06-13
- Sector
- Social Insurance Agency in Slovakia was founded on 1 November 1994 by Act No. 274/1994 Coll. as a statutory institution to administer the sickness insurance and the pension security substituting thus its ancestor the National Insurance Institution.
- Articles
- Art. 24 par. 1 GDPRArt. 32 par. 1 and 2 GDPR
Social Insurance Agency in Slovakia violated the proposer's right to protection of his personal data by sending personal data of applicants to the adress of the holders of social insurance of the EU member states via Slovenská pošta.
Social Insurance Agency in Slovakia violated the proposer's right to protection of his personal data by sending personal data of applicants to the extent that includes data related to health, identifiers assigned for individual identification in information systems and data related to economic and social identity, sent to the adress of the holders of social insurance of the EU member states via Slovenská pošta, a.s. always as a Class 2 letter-post item and not as a registered item which provides a higher level of protection of the personal data processed and therefore the controller has not taken appropriate measures to ensure a level of security commensurate with the risk to the rights of data subjects with regard to the scope and content of the personal data processed and the nature of their processing.
Additional information
The proposer has found that the controller violated the protection of his personal data, in particular by sending sensitive documents concerning his person, in particular the consignment "Application for a foreign invalidity pension", by ordinary (not recommended) consignment, i. without any confirmation of shipment, without a delivery number and without any guarantee that the shipment will be delivered in order and not lost, or misused by a third party. In the specific case, the consignment was sent to Denmark. The consignment contained a large amount of the insured's personal data, including data on his health, data on the course of employment, income, as well as personal data of family members. This shipment was lost during delivery. In order for the Controller to take organizational measures to ensure that personal data of applicants for disability pension from social insurance of EU member states, which the operator sends to the relevant social insurance holders by letter via Slovenská pošta, a.s., will be sent as a registered item