CBP BES Announces Proposed Fine Against OLB for Noncompliance with Agreement | News Item

News | 12-08-2024 | 17:07

In March 2023, CBP BES conducted an inspection of OLB. This revealed that the clean desk and clear screen policy, which was part of the “Information Security Awareness” policy, was not adequately implemented. As a result, personal data was not adequately protected.

Despite issuing the report and setting deadlines of October 1, 2023 and March 1, 2024, OLB has failed to take the necessary actions, or at least to adequately inform CBP BES of the matter. In addition, OLB has not yet provided substantive responses to written questions from CBP BES, which were supposed to be answered by April 22, 2024.

Based on the above, the Commission concluded that OLB has not properly implemented the “Information Security Awareness” policy and therefore OLB has not complied with adequate organizational and technical protection of personal data in various workplaces. The Commission made prioritized recommendations and steps to be taken in its report. To date, these recommendations have not been followed.

Therefore, CBP BES intends to impose penalties to achieve necessary improvements in the areas of organizational and technical security and the Clean Desk/Clear Screen policy within OLB. A penalty order is a corrective enforcement tool available to CBP BES. If the action is not taken promptly, a penalty of $15,000 will be imposed, which can be increased over time to a maximum of $90,000. This measure is considered appropriate to induce OLB to implement the prescribed recommendations and prevent further violations of privacy legislation.

CBP BES emphasizes that protecting the personal data of residents of Bonaire, Sint Eustatius, and Saba is of paramount importance.

The full report and more information are available on the CBP BES website: www.cbpbes.com.