Case Notes

An online store sent invoices containing personal data to customers via unencrypted weblinks... <more>

A staff member of a sports organisation accidentally uploaded and transmitted the personal data of event participants – DPP 4 – security of perso... <more>

An educational institution’s improper password management led to unauthorised access to the personal data of students and parents – DPP 4 – secur... <more>

Unencrypted personal data transmitted in mobile applications – DPP 4 – security of personal data... <more>

Unauthorised access to an international fashion chain’s customer personal data system – DPP 4 – security of personal data... <more>

Unauthorised access of personal data held by public schools via a web-based application system – DPP 4 – security of personal data... <more>

Recruitment platform wrongfully sent out emails containing CV information – DPP 4 – security of personal data... <more>

Unauthorised circulation of confidential documents containing personal data in social media network – DPP 4 – security of personal data... <more>

Personal data collection in shopping mall membership programmes and online promotion activities – DPP 1 – purpose and manner of collection of per... <more>

This case related to DPP3 - Use of personal data... <more>

This case related to DDP2 – Accuracy and duration of retention of personal data, section 26 – erasure of personal data... <more>

Websites without secure transmission of personal data – DPP 4 – security of personal data... <more>