The French National Commission for Data Protection and Liberties (Commission nationale de l’informatique et des libertés) imposed a fine of 250.000 EUR on Optical Center. This is the first time such a high fine is imposed. It was possible via the website of Optical Center to access several invoices of other clients. The invoices included personal data, prescription information and social security numbers.
This case was raised before the coming into force of the GDPR. Only facts noticed after the GDPR deadline of 25 May would have been taken into account for the fine.
For more information in French click here.
Topic: Optical News