Active Assurances
€180K($194K USD)final
Date Issued
2019-07-25
Regulation
Authority
French Data Protection Authority (CNIL)
Country
France
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The company had allowed for personal data belonging to clients (including copies of the driver’s license) to be publicized online. Apparently, unauthorized access was detected, and the fault lies with the inappropriate security measures.
Articles Violated
Art. 32 GDPR