22 November 2021 Background information Date of final decision: 14 October 2021 Cross-border case or national case: National case Controller: Bank Millennium S.A. Legal Reference: Notification of a personal data breach to the supervisory authority (Article 33(1)), Communication of a personal data breach to the data subject (Article 34(1)) Decision: Infringement of the GDPR, fine…
Category: Lost or Missing
VA: Hundreds of parents, students, staff at risk of identity theft as personal records found tossed on floor at Old Pulaski Middle School
Kelsey Jean-Baptiste reports: Concerns about confidential records being found thrown on the ground of the Old Pulaski Middle School have many worried. Hundreds of students, teachers, and staff are now at risk of having their private information stolen. Pulaski School superintendent, Dr. Kevin Siers says the documents date back to the 1970s. In pictures given…
UK: Tesco worker compensated after supermarket lost 15 years of her medical records
Tristan Cork reports: A woman from Bristol has been awarded £3,000 in compensation after discovering Tesco had lost 15 years of her employment records, including sensitive medical information. Jacqueline Ogborne worked for the supermarket chain for 30 years but said the data breach left her ‘feeling violated’. The 55-year-old only discovered Tesco had lost her employment…
Justice determines breach of confidentiality of medical records
Jenni Smith reports: The court determined the breach of confidentiality of patient records of the health operator Prevent Senior who died of covid-19. The operator is suspected of forging death certificates and omitting covid-19 as the cause of death in some cases. The information was initially released by TV Globo and confirmed by the report…
Je: Staff shortages blamed for lost medical records
A number of medical records – which are still kept in paper form in Jersey – went missing in the hospital in August, the Health Minster has confirmed. Read more on Jersey Evening Post. It’s not clear to me how being short-staffed led to missing records. Did existing staff just fail to return records after…
City of Dallas calls IT protocols ‘inadequate’ in 131-page report on police data loss
Ryan Osborne reports: Dallas’ city information technology department sent a 131-page report to city council on Thursday, detailing the massive data loss involving police records earlier this year and attributing the issue to “inadequate” protocols among IT staff. The report confirmed that 22 terabytes of data, involving more than 8 million records, were deleted in…