Cyprus

Universal Life Insurance Public Co Ltd.

3,500 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2022.

Rank · Sector

#247

of 322 in Finance, Insurance and Consulting

Rank · Cyprus

#36

of 47

Rank · All fines

#1,963

of 3,042

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2022
Controller / Processor: Universal Life Insurance Public Co Ltd.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 24 (1) GDPR, Art. 28 (1) GDPR
Type of violation: Insufficient data processing agreement

Summary

The Cypriot DPA has imposed a fine of EUR 3,500 on Universal Life Insurance Public Co Ltd. The processor of the data controller had suffered a data breach in which personal data of customers were mistakenly disclosed to other customers. During its investigation, the DPA found that the controller had failed to contractually regulate the relationship with its processor. The DPA concluded that the controller had contracted a processor without ensuring that the processor provided sufficient guarantees for the implementation of appropriate technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.