Data Breach Policy

The company CPL Concordia Soc. Coop. In order to protect the rights and freedoms of natural persons, as well as their personal data, it has provided for a Data Breach Policy, to better deal with cases of personal data breaches.
A personal data breach is the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data that is transmitted, stored or otherwise processed.

The causes that can lead to such situations can be:

• Intentional or unintentional human error
• Unforeseen circumstances such as fire, flood, earthquake, etc.
• Hacker attack
• Failure of the planned mitigation measures
• “Blagging” offenses in which information is obtained by deceiving the organization holding it.

The main risks to the rights and freedoms of individuals, as a result of the data breach, are:

• Physical, material or immaterial damage to natural persons;
• Loss of control of Data Subjects’ data;
• Limitations of rights/discrimination;
• Identity theft or usurpation;
• Financial losses/economic, social or reputational damage (both for the Data Subject and for the Data Controller);
• Unauthorized decryption of pseudonymization;
• Loss of confidentiality of personal data protected by professional secrecy (health, judicial);
• Unauthorized Use of Personal Data.