The Data Protection Authority (the “Authority”) published the “2018 list of violations of the Data Protection Act” on its website.
The list shows that the Authority most often imposed fines for breaches of obligation pursuant to Section 45(1)(e) of the Data Protection Act, i.e. for the processing of personal data without data subject’s approval. From May to December 2018, the Authority imposed fines for this type of breach in the total amount of CZK 1,695,000.00.
It is followed by the breaches of obligations pursuant to Section 45(1)(h) of the Data Protection Act, i.e. no adequate security measures for data processing in place, for which the Authority imposed fines in the total amount of CZK 2,181,000.00.
Last but not least, there has been a new act – Act No. 110/2019 Coll., on data processing in effect since April 2019.
Do not underestimate your legal obligations and prevent any sanctions which might be threatening. The law office will be more than happy to give advice in this respect, so please do not hesitate to contact us!