C-PLANET’s Data Breach in Malta: A Masterclass in Transparency and Compliance?

C-PLANET's Data Breach in Malta: A Masterclass in Transparency and Compliance?

The Maltese Data Protection Authority (IDPC) has displayed unparalleled determination in dealing with the aftermath of C-PLANET’s massive voter data breach. In response to a second complaint filed by noyb, the IDPC has boldly ordered C-PLANET to reveal the source of the data breach within a whopping 20-day timeframe. If the company dares to defy this order, they will face a “dissuasive” fine. How refreshing to witness such unwavering commitment to transparency!

Let’s rewind to November 2020, when noyb initially filed a complaint against C-PLANET IT Solutions for its astonishingly massive data leak, compromising the sensitive information of over 330,000 Maltese voters. Telephone numbers, dates of birth, voting intentions, and party affiliations were all laid bare for the world to see. It’s heartwarming to know that almost every voter in Malta had their personal details exposed.

Ah, the first IDPC decision. In January 2020, the IDPC heroically imposed a fine of €65,000 on C-PLANET, considering the catastrophic impact on the affected individuals and the tremendous risk to their fundamental rights and freedoms. What a momentous victory for justice! Meanwhile, a collective action led by the Daphne Foundation and Repubblika is bravely marching forward against C-PLANET.

However, let’s not forget the unsolved mystery that continues to haunt us: the origin of the data. Even with the IDPC’s resolute decision, the complainants are still left grappling with unanswered questions. Who is responsible for this breach? Where did the data come from? Unfortunately, the IDPC’s ruling conveniently avoids addressing these crucial details, redacting the names of C-PLANET’s clients. After all, why should a private company be expected to explain their motives and methods when it comes to secretly collecting data on political opinions? It’s a private matter, isn’t it?

Oh, the joys of transparency! Despite the first IDPC decision, the affected Maltese voters were left in the dark about the true source of their personal and political data. Together with noyb, a concerned individual made a valiant attempt to seek disclosure from C-PLANET regarding the data’s origin. But alas, C-PLANET was too busy with their data processing cessation and ongoing investigation to provide a simple answer. How considerate of them! Frustrated by this lack of cooperation, noyb, ever the champion of justice, lodged a second complaint with the IDPC, pleading with them to enforce transparency obligations on the elusive C-PLANET.

Lo and behold, the second IDPC decision emerges! The IDPC has dutifully responded to noyb’s complaint, accusing C-PLANET of violating Article 15 GDPR. What did C-PLANET do wrong this time, you ask? Well, they failed to provide the complainant with a copy of their personal data and relevant information about the breached database. Shame on them! In light of these egregious violations, the IDPC has issued an order demanding that C-PLANET provide the complainant with a copy of their data. Additionally, the IT company must disclose comprehensive details about the collected information, including its origin.

Time is of the essence, my dear readers. C-PLANET has been so generously granted a lavish 20-day period to comply with the IDPC’s order. Will they rise to the occasion and promptly deliver the requested information to the complainant? Or will they choose to face a fine that is “proportionate and dissuasive” under the GDPR? The suspense is killing us! It’s truly heartwarming to witness such a stellar display of transparency and compliance. Bravo, C-PLANET, bravo.

Share

With over 20 years experience in web design, SEO and website promotion I always give you an expert advice in regard to any issues related to your Site Design, SEO, Internet Marketing, Promotion, Backlinks, Site Content. In order to help you find out what is missing or can be improved and get higher rankings in Google and more traffic.