[ad_1]
News | 12-08-2024 | 17:09
The Data Protection Authority BES (CBP BES) intends to impose a penalty order on the Bonaire Public Entity (OLB). The reason for this measure is that OLB did not follow the advice of CBP BES and did not comply with the previous agreement.
In March 2023, CBP BES conducted an audit of OLB. The audit found that the clean desk and clean screen policies as part of the “Information Security Awareness Road” policy had not been fully implemented. Therefore, personal data was not adequately protected.
Despite submitting the report and setting deadlines of October 1, 2023 and March 1, 2024, OLB failed to take the necessary actions, or at least failed to adequately inform CBP BES. In addition, OLB failed to provide substantive responses to written questions from CBP BES, which were supposed to be answered by April 22, 2024.
Based on the above, the Data Protection Authority concluded that OLB had not properly implemented the “Information Security Awareness” policy, resulting in OLB not having adequate organizational and technical protection of personal data in various workplaces. The Commission made recommendations and steps to be taken in its report. These recommendations have not yet been implemented.
Therefore, CBP BES intends to issue a penalty order to compel OLB to make the necessary improvements in organizational and technical security and clean desk/clean screen policies. Penalty orders are a corrective enforcement tool available to CBP BES. Penalties are $15,000 for failure to promptly implement measures, increasing over time to a maximum of $90,000.00. This measure is considered appropriate to induce OLB to continue to implement the prescribed recommendations and prevent further violations of privacy legislation.
CBP BES emphasizes that protecting the personal data of residents of Bonaire, Sint Eustatius, and Saba is of paramount importance.
The full report and more information can be found on the CBP BES website: www.cbpbes.com.
[ad_2]
Source link
