Security company (name N/A at the moment) – Complaint Upheld (Croatia, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A security company failed to protect video surveillance footage, which an employee shared publicly. The company didn't take steps to remove the footage or prevent future incidents. This case shows the need for strong security measures to protect personal data.
What happened
An employee of a security company shared video surveillance footage publicly, and the company failed to secure the data.
Who was affected
Individuals recorded by the security company's video surveillance system.
What the authority found
The Croatian DPA upheld the complaint, noting the security company did not have adequate measures to protect personal data as required by GDPR.
Why this matters
This case emphasizes the need for companies, especially those handling sensitive data like video footage, to implement strong security measures. It serves as a warning to ensure data protection practices are robust and effective.
GDPR Articles Cited
A data controller, who used the services of the security company, reported the breach of personal data to the DPA, arising after an employee of the company recorded the video surveillance footage with a smartphone and shared it with third parties. In consequence a recording was revealed ridicule in the public and the security company avoid doing anything to remove it from social networks and media. Furthermore, the processor has not prognosticated or implemented adequate technical security measures following the incident to prevent or minimize the risks. Insufficient technical and organisational measures were set to ensure data security, but the fact is that the basic activity of the company is the provision of physical and technical protection, which includes the use of video surveillance.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for Security company (name N/A at the moment) in HR
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Security company (name N/A at the moment) - Croatia (2021). Retrieved from cookiefines.eu
Last updated: