Company: Insufficient technical and organisational measures to ensure information security

A company had stored telecommunications hardware, a server and backup technology in a guest bathroom. The server cabinet, which did not have an intact lock, also served as a changing table.

GDPR Articles: Art. 25 GDPR, Art. 32 GDPR
Industry: Not assigned