ICO (UK) · 18 October 2021
HIV Scotland
About: Data principles, Data security
FineGBP10,000≈ €11,800Violation found
- Regulator
- ICO (UK)
- Decided
- 18 October 2021
- Country
- United Kingdom
- Sector
- Not given
- Regulator’s reference
- HIV Scotland
- Fino case number
- 2021/GB/019
What happened
The UK DPA (ICO) imposed a fine of around €12000 on HIV Scotland for failing to implement appropriate organisational and technical measures. The charity disclosed special category data by sending a group email in CC rather than BCC.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f)Read →
- Art. 32Security of processing32(1) · 32(2)Read →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/GB/019.