La Poste
Warning (avertissement) with one month to come into conformity. CDP, 18 May 2018.
The facts
Acting on a plenary decision, the CDP carried out an on-site control mission at La Poste on 7 and 8 March 2018 to verify the conformity of its customer-data processing. The mission found ambiguities in how long physical payment proofs were kept, weak security measures for storing them, no formalised procedure for customers to exercise their rights, and personal-data processing operations that had never been declared to the Commission.
Orders and outcome
At its session of 18 May 2018 the plenary pronounced a warning against La Poste and gave it one month from notification to come into conformity, including regularising the declaration of its video surveillance, fingerprint access-control and other processing, applying document-retention procedures across post offices, implementing a retention limit in its systems, and meeting the security standards. Dated 18 May 2018.
Cite this decision
Track Senegal enforcement
Tell us your jurisdictions and we email you when a regulator's decision passes verification. Privacy.