Violation of data protection regulations

Serious infringements against regulations for the protection of personal data, health data and insurance data.

Examples: Unauthorised collection, disclosure or processing of personal data; unauthorised technical monitoring of employees; use of the business data for private purposes; publication of photographs of customers or employees on the internet/intranet without explicit consent; use of customer data for marketing purposes without explicit consent; sharing passwords with unauthorised persons.

Violation of IT security guidelines

Violation of guidelines aimed at the protection of data from distortion, destruction and unauthorised disclosure.

Examples: Impairment of the security of IT systems and networks in a way that significantly endangers the confidentiality, integrity and/or availability of its information or systems; sharing of access credentials with unauthorised persons; cyber attacks.