Select language


First fine for GDPR in Great Britain

The first fine for a personal data protection breach in the UK was imposed on a pharmacy (Doorstep Dispensaree Ltd), which delivers medicines to nursing homes.

On 20 December 2019, the company was fined GBP 275 000, mainly because personal data documents were improperly archived, which is contrary to the GDPR Regulation. According to the information published, these documents were placed in the outer courtyard of the pharmacy in 47 storage crates, a cardboard box and storage bags, in amount of approximately 500,000 documents. At the same time, the company was criticized for not having a retention policy in place.

Controllers of processed personal data are obliged to protect the data from damage, accidental loss or destruction, regardless of whether they are in electronic or paper form.

If you have any doubts about compliance with the regulations related to the GDPR regulation in your organization, do not hesitate to contact us.

© Copyright 2021 IOSEC. All Rights Reserved.