SOSAGRIN
Formal notice (mise en demeure) following refusal of authorisation; lifted by closure letter after the company appointed a new occupational doctor. CDP, December 2019.
The facts
Sosagrin applied to the CDP for authorisation to process an employee register containing workers' personal data. By deliberation of 19 April 2019 the Commission refused, because employees' health data was accessible to unauthorised personnel: the workers' medical data was handled by a health professional who was at the same time the company's deputy director. When Sosagrin did not answer the Commission's letters, the CDP put it on formal notice for that conflict of interest and for obstructing the Commission's action.
Orders and outcome
Following the formal notice Sosagrin regularised the breaches by appointing a new company doctor to handle workers' medical data, and the CDP sent a closure letter lifting the formal notice. Dated 2019.
Cite this decision
Track Senegal enforcement
Free: a monthly digest of new verified decisions in your chosen jurisdictions. You confirm by email before anything is sent; every alert has an unsubscribe link. Privacy · Terms.