ACM fined KPN hack – Connexie B2B

 Published: Wednesday, June 3rd, 2015

 By: Peter Waasdorp
 
 
 
 

  The Authority Consumer & amp; Market (ACM) has already in December 2013 to KPN BV a fine of 365,000 euros imposed for inadequate securing systems in which the customers’ personal data are stored. Telecom providers are legally obliged to adequately protect personal data and privacy of their customers, so that third parties thereto have no access.

Once a hacker in January 2012 had broken into the network of KPN ACM (formerly OPTA) launched an investigation into how KPN secure the personal data of its customers. The investigation showed that in the period prior to hack the security of this data from KPN customers and how security in the organization was assured was insufficient. After the hack was discovered, KPN has responded rapidly to bring the security of its networks and systems in order.

The penalty decision ACM is only now being made public because KPN against previous disclosure was done at the facilities of judges of the District Court and the Board of Trade and Industry (Tribunal). The judge of the tribunal ruled on June 1, 2015 on the case. This statement makes it possible to publish the penalty decision and the appeal decision.

ACM board member Anita Vegter: “Customers appreciate their personal data available to telecom companies to use their services. They do so in the confidence that these companies thoroughly with their data handling and care of. Happens inadequate, as in this case KPN, then harms consumer confidence in the telecom market. This is an undesirable situation where we act against. ” On January 8, 2015, the Court of Rotterdam ruled that ACM rightly KPN fined. This judgment of the court, KPN has appealed to the Tribunal.

secure

Duty of care telecom providers
All telecom providers have the duty (duty) to the personal data and privacy of their customers at an appropriate level. The measures taken by the telecom operators, ensuring an appropriate level of security, taking into account the state of technology, the cost of the measures to take and the risk of rupture of the protection.