Car renting company
€1K($1K USD)final
Date Issued
2019-02-04
Regulation
Authority
Czech Data Protection Authority (UOOU)
Country
Czech Republic
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The company sold a card that was constantly tracked through GPS. The owner found this out and reported it since the company had no information related to this GPS tracking. The Czech Data Protection Authority decreed that this was a violation of Art. 5 (1) of the GDPR, and issued a fine.
Articles Violated
Art. 5 (1) a) GDPR