In 2024, according to the report from the Center for Personal Data Protection, most inquiries were related to the processing of personal data through video surveillance, social networks, telecommunications, labor relations, medical services, education, the financial-banking sector, and the public sector.
🔎 The raised issues reflect the growing concern of personal data operators regarding the implementation of organizational and technical measures necessary to ensure the confidentiality and security of processed data. This need is becoming increasingly urgent against the backdrop of intensified personal data exchanges between public and private entities, including individuals, associations, and businesses.
📌 Key issues identified in complaints and inquiries:
📹 Video/audio surveillance – 435 cases
❌ Data processing without consent – 346 cases
📢 Unauthorized disclosure on social networks – 179 cases
🔍 CNPDCP inspections in 2024 resulted in the issuance of 372 decisions, of which 173 found legal violations, including:
✅ 111 cases of non-compliance with conditions for data processing, storage, and use
✅ 10 cases of violations of data subjects’ rights
✅ 18 cases of refusal to provide requested information/documents to the supervisory authority
📢 Recommendation: In light of the adoption of the new Personal Data Protection Law, which partially implements the European General Data Protection Regulation (GDPR), operators are strongly advised to conduct an audit and implement European standards in this field. Failure to comply with the new requirements may result in significantly increased sanctions, including fines of up to 2% of annual turnover
Need a consultation?
We can provide it for you! More details at the link: Protection of personal data in your company
