Successful inspection at our client

Successful inspection at our client

What was the result of an official inspection of the municipality whose external performance of the Data Protection Oficer (DPO) is provided by our company?

Inspection body

Compliance with the General Data Protection Regulation (GDPR) and Act no. 18/2018 Coll. on the protection of personal data is the responsibility of the Office for Personal Data Protection of the Slovak Republic. In case of violation of GDPR or the law, this inspection body will impose sanctions on you. In addition to remedying the current situation, you can lose considerable money.

Financial fines

The fine alone may amount to EUR 20 million or 4% of the company's annual turnover. All depending on which amount is higher. Although the Office for Personal Data Protection speaks about the principles of appropriateness even a smaller amount may be liquidative for several entities. Especially when they are start-ups or government institutions.

Inspection at our client

This time the inspection body chose our client - the municipality. Our employees were physically present and helpful throughout the inspection.

This check focused in particular on whether the processing of the personal data of the data subjects via the CCTV complies with the GDPR. In addition, the Office for Personal Data Protection also examined other obligations, including the fulfillment of the obligation to appoint a Data Protection Officer.

The municipality has the performance of DPO provided by an external person from our company. This person provided expert advice so that the municipality could meet the demanding conditions of personal data protection under GDPR and the law.

The Office for Personal Data Protection of the Slovak Republic found no contradiction with the applicable legislation and therefore stated that the processing of personal data in this case was in accordance with the requirements of GDPR.

The only mistake was made by our client by late cooperation with our company. The supervisory authority criticized the municipality for the late appointment of a Data Protection Officer. It was to be appointed from the date of GDPR release, but the municipality began to use our advisory services only a few months later.