Sanction RGPD Austrian Data Protection Authority (dsb) — Covid 19 Test Lab : 100 k€ (2024)
- Autorité de contrôle
- Austrian Data Protection Authority (dsb)
- Pays
- Autriche
- Entreprise / secteur
- Covid 19 Test Lab
- Montant de l'amende
- 100 k€
- Date de la décision
- 6 juin 2024
- Fondement juridique
- Art. 9, Art. 5 (1) f), Art. 28 (3), Art. 32, Art. 34
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Austrian DPA has imposed a fine of EUR 100,000 on a Covid 19 test lab. The controller failed to implement sufficient technical and organisational measures, resulting in a data breach. Furthermore, the controller refused to inform the data subjects of the breach. The DPA also found that the controller processed certain data without a sufficient legal basis, used a processor without the necessary contract, failed to designate a suitable DPO, and failed to report the designation to the DPA.