Universal Life Insurance Public Co Ltd. – €3,500 Fine (Cyprus, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Universal Life Insurance in Cyprus was fined EUR 3,500 for not properly managing a data breach. They failed to ensure their service provider had the right protections in place, leading to customer data being mistakenly shared. This case highlights the importance of having strong contracts with service providers to protect customer information.
What happened
Universal Life Insurance's service provider accidentally disclosed customer data to other customers.
Who was affected
Customers of Universal Life Insurance whose personal data was mistakenly shared.
What the authority found
The Cypriot DPA found that Universal Life Insurance did not ensure their service provider had adequate data protection measures, violating GDPR requirements.
Why this matters
This case emphasizes the need for companies to have clear agreements with their service providers to ensure data protection. Small businesses should review their contracts to prevent similar issues.
GDPR Articles Cited
The Cypriot DPA has imposed a fine of EUR 3,500 on Universal Life Insurance Public Co Ltd. The processor of the data controller had suffered a data breach in which personal data of customers were mistakenly disclosed to other customers. During its investigation, the DPA found that the controller had failed to contractually regulate the relationship with its processor. The DPA concluded that the controller had contracted a processor without ensuring that the processor provided sufficient guarantees for the implementation of appropriate technical and organizational measures to protect personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Universal Life Insurance Public Co Ltd. in CY
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 January 2022
Authority
Commissioner for Personal Data Protection
Fine Amount
€3,500
Enforcement Tracker ID
ETid-1620
About this data
Cite as: Cookie Fines. Universal Life Insurance Public Co Ltd. - Cyprus (2022). Retrieved from cookiefines.eu
Last updated: