{"id":14221,"date":"2026-07-01T09:02:11","date_gmt":"2026-07-01T09:02:11","guid":{"rendered":"https:\/\/viqtor.eu\/?p=14221"},"modified":"2026-07-02T08:39:33","modified_gmt":"2026-07-02T08:39:33","slug":"violations-de-donnees-cnil-tire-sonnette-alarme","status":"publish","type":"post","link":"https:\/\/viqtor.eu\/et\/cnil-on-andmelekke-parast-mures\/","title":{"rendered":"Andmelekked: CNIL annab h\u00e4irekella ja meie teeme seda ka."},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14221\" class=\"elementor elementor-14221\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2d75f86 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2d75f86\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6e589fb ot-flex-column-vertical elementor-invisible\" data-id=\"6e589fb\" data-element_type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;fadeInLeft&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a030734 elementor-widget elementor-widget-heading\" data-id=\"a030734\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Andmelekked: CNIL annab h\u00e4irekella ja meie oleme n\u00f5us.<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7345c5d5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7345c5d5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-11f89eef ot-flex-column-vertical\" data-id=\"11f89eef\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6dd20d9a elementor-widget elementor-widget-text-editor\" data-id=\"6dd20d9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Kaks n\u00e4dalat tagasi helistas mulle paanikas \u00fcks juht. \u00dcks tema teenusepakkujatest oli just k\u00fcberr\u00fcnnaku ohvriks langenud. Tema klientide failid, mis tema arvates olid &quot;sertifitseeritud&quot; SaaS-pakkuja poolt h\u00e4sti kaitstud, olid avalikud. Esimene k\u00fcsimus, mille ta mulle esitas, oli: &quot;Noh, see on nende probleem, eks?&quot; Noh, ei. See on ka tema oma. Ja see on t\u00e4pselt \u00fcks peamisi j\u00e4reldusi avaldatud aastaaruandest. <b>CNIL <\/b>18. mai: <b>andmelekked<\/b> plahvatada ja allt\u00f6\u00f6v\u00f5tuahel on peaaegu alati v\u00f5rrandis.<\/p><p>6167 teadet <b>andmete rikkumine<\/b> registreeriti 2025. aastal. Rekordiline. 9,5 % rohkem kui 2024. aastal ja 2026. aasta esimene kvartal j\u00e4rgib juba sama trendi 2730 juhtumiga. Nende arvude taga on miljonid m\u00f5jutatud prantslased, vapustatud ettev\u00f5tted ja selge s\u00f5num Marie-Laure Denisilt, kes on ... president. <b>CNIL<\/b> seal <b>k\u00fcberturvalisus <\/b>nii riigi kui ka ettev\u00f5tete oma on &quot;kaugelgi mitte rahuldav&quot;.<\/p><div class=\"wp-block-buttons\"><p><!-- \/wp:button --><\/p><\/div><p><!-- \/wp:buttons --><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c6ed5c5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c6ed5c5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5b31466 ot-flex-column-vertical\" data-id=\"5b31466\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1dd04c elementor-widget elementor-widget-text-editor\" data-id=\"f1dd04c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Kokkuv\u00f5ttes<\/h2><ul><li>Absoluutne rekord <b>andmelekked<\/b> Prantsusmaal 2025. aastal: 6167 teadet, +9,5 % \u00fche aasta jooksul ja 2026. aasta esimene kvartal kinnitab seda suundumust.<\/li><li>THE <b>andmelekked<\/b> muutuvad \u00fcha ulatuslikumaks, kusjuures esirinnas on avalik haldus ja v\u00e4ga sageli on kaasatud teenusepakkuja.<\/li><li>Hindamis- ja lepinguline raamistik <b>GDPR-i allt\u00f6\u00f6v\u00f5tja<\/b> on saanud esmaseks kohustuseks: a <b>Andmekaitse <\/b>Aluseks on vastavus, auditid ja j\u00e4lgimine.<\/li><li><b>Mitmefaktoriline autentimine <\/b>(<b>Maisterfinantseerimine<\/b>) on n\u00fc\u00fcd m\u00f5\u00f5t, mille kohaselt <b>CNIL <\/b>vaikimisi ootab. Aastal 2026 keskendub 50 % selle juhtelementidest sellele <b>k\u00fcberturvalisus<\/b>.<\/li><li>Protseduur, mis h\u00f5lmab <b>rikkumise teatis<\/b> testitud, v\u00e4rskendus <b>t\u00f6\u00f6tlemistoimingute register<\/b> ja selle realiseerimine <b>AIPD <\/b>muuta suurel p\u00e4eval k\u00f5ik.<\/li><li>N\u00f5uetele vastavust ei t\u00f5enda kavatsused, vaid dokumendid: see ongi see, mis see on.<b>vastutus.<\/b><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c26d073 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c26d073\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-258e34b ot-flex-column-vertical\" data-id=\"258e34b\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e634570 elementor-widget elementor-widget-text-editor\" data-id=\"e634570\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2><span style=\"color: black;\">Mida CNILi aastaaruanne (tegelikult) \u00fctleb<\/span><\/h2><div><h3>&quot;\u00dcha ulatuslikumad&quot; rikkumised<\/h3><p>Aruanne ei ole lihtsalt loendav. See loob pildi. Umbes nelik\u00fcmmend intsidenti 2025. aastal m\u00f5jutasid iga\u00fcks enam kui miljonit inimest \u2013 k\u00fcmme rohkem kui 2024. aastal. Avaliku halduse valdkond on 19 miljoni teatatud intsidendiga esirinnas, millele j\u00e4rgnevad tervishoid, sotsiaalteenused ning seej\u00e4rel finants- ja kindlustustegevus. Ja see pole veel k\u00f5ik: see arv ei h\u00f5lma isegi k\u00fcberr\u00fcnnakuid Weda ja Harvest tarkvara vastu, mis \u00fcksi genereerisid \u00fcle 11 600 klienditeate. \u00dcks intsident \u00fclesvoolu, tuhanded ettev\u00f5tted allavoolu. See \u00fctleb k\u00f5ik.<\/p><h3>Kolm \u00f5ppetundi, mis tuleb selgeks \u00f5ppida<\/h3><p>Seal <b>CNIL <\/b>Kolm peamist t\u00e4helepanekut, mille kohaselt peaks iga juht juhatuses silmapaistvalt kirjutama. Esiteks: kedagi ei s\u00e4\u00e4steta. Spordiliidud, hotelliketid, vastastikused kindlustusseltsid, kohalikud omavalitsused, VKEd ja ka suurettev\u00f5tted \u2013 ohul pole enam t\u00fc\u00fcpilist profiili. Teiseks: <b>andmelekked<\/b> Need puudutavad \u00fcha suuremaid mahtusid. Kolmandaks, ja siin on teema seotud meie eelmiste artiklitega: need juhtumid h\u00f5lmavad sageli teenusepakkujaid. <b>GDPR-i allt\u00f6\u00f6v\u00f5tja<\/b> on muutunud k\u00f5ige haavatavamaks l\u00fcliks.<\/p><h3>R\u00fcndajate meetod on muutumas tavaliseks.<\/h3><p>H\u00e4kkimine moodustab poole k\u00f5igist teatatud intsidentidest. Selle s\u00f5na taga peitub terve hulk probleeme: <b>lunavara, andmep\u00fc\u00fck, volituste v\u00f5ltsimine<\/b>, seaduslike kasutajakontode vargus. Lisaks sellele on 13 juhtumit tingitud valest adressaadist e-kirja kopeerimisest, 7 riistvara kadumisest ja 7 kogemata postitamisest. L\u00fchidalt \u00f6eldes on inimlik viga endiselt oluline tegur. Ja siis on veel genereeriv tehisintellekt, mis presidendi s\u00f5nul <b>CNIL<\/b>ANTS-i juhtum, milles p\u00e4rast turvaliste dokumentide agentuuri h\u00e4kkimist kahtlustatakse 15-aastast alaealist \u2013 prokur\u00f6ri s\u00f5nul mitte imelast \u2013, on selle jahmatav n\u00e4ide.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b930d9d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b930d9d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-772bccc ot-flex-column-vertical\" data-id=\"772bccc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1cad34 elementor-widget elementor-widget-text-editor\" data-id=\"f1cad34\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Miks teie allt\u00f6\u00f6v\u00f5tjad on (ikka veel) probleemi keskmes<\/h2><div><h3>Kui teenusepakkuja kukub, kukuvad koos temaga ka tema kliendid.<\/h3><p>Naaskem Weda ja Harvest tarkvara loo juurde. Need olid kaks k\u00fcberr\u00fcnnakut, kuid ametkond sai 11 600 teadet. Sest iga kord on tarkvara v\u00e4ljaandja taga sadu meditsiinipraktikaid, sadu varahalduse n\u00f5ustajaid, keda see samuti m\u00f5jutab. <b>andmet\u00f6\u00f6tleja<\/b> ja peavad lekkest oma klientidele teatama. T\u00e4pselt selline on allt\u00f6\u00f6v\u00f5tja Mobiuse\/Deezeri stsenaarium, kus <b>CNIL <\/b>Sellele m\u00e4\u00e4rati 2025. aasta l\u00f5puks miljoni euro suurune trahv \u2013 ainult et siin on kulud mitmekordsed. \u00dcks r\u00fcnnak, tuhat professionaalset ohvrit, miljonid m\u00f5jutatud inimesed.<\/p><h3>Esialgne hindamine: teie parim (ja ainus) kaitse<\/h3><p>GDPR ei j\u00e4ta kahtlusteks ruumi: a <b>andmet\u00f6\u00f6tleja<\/b> \u201ekasutab ainult allt\u00f6\u00f6v\u00f5tjaid, kes pakuvad piisavaid tagatisi.\u201c See artikli 28 l\u00f5ikes 1 s\u00e4testatud kohustus ei ole soovm\u00f5tlemine. See on see, mida inspektorid otsivad. T\u00e4psemalt, kas saadate igale teenusepakkujale hindamisk\u00fcsimustiku? Kas k\u00fcsite nende ohutuspoliitika, nende <b>t\u00f6\u00f6tlemistoimingute register<\/b>, nende nimi <b>Andmekaitseametnik<\/b>Nende sertifikaadid? Kas olete oma sertifikaadid kindlaks teinud? <b>andmeedastus<\/b> V\u00e4ljaspool EL-i? Kui vastus m\u00f5nele neist k\u00fcsimustest on &quot;ee&quot;, on teie esimene operatiivne prioriteet.<\/p><h3>Ainult lepingust ei piisa, ega ka auditist, vaid m\u00f5lemast koos, jah.<\/h3><p>A <b>GDPR-i allt\u00f6\u00f6v\u00f5tuleping<\/b> h\u00e4sti kirjutatud \u2013 ehk siis <b>Andmekaitse<\/b> Artikli 28 \u00a73 kaheksa kohustusliku klausli kordamine on alguspunkt, mitte l\u00f5ppeesm\u00e4rk. Pikaajaline juhtimine on samuti oluline: iga-aastased auditid, j\u00e4rgnevate allt\u00f6\u00f6v\u00f5tjate \u00fclevaatused, j\u00e4relevalve. <b>tehnilised ja korralduslikud meetmed <\/b>t\u00f5husalt rakendatud. Selle l\u00e4henemisviisi struktureerimiseks <a href=\"https:\/\/viqtor.eu\/et\/alltoovotja-moodul\/\">Viqtori allt\u00f6\u00f6v\u00f5tjate moodul<\/a> koondab hinnangud, lepingud, auditid ja tehingute ajaloo \u00fchte hoidlasse. See on t\u00f5end, mida vastutav t\u00f6\u00f6tleja <b>CNIL <\/b>Tore n\u00e4ha.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-06a5fd8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"06a5fd8\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b73a781 ot-flex-column-vertical\" data-id=\"b73a781\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-16bd074 elementor-widget elementor-widget-text-editor\" data-id=\"16bd074\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Kas teie allt\u00f6\u00f6v\u00f5tjate lepingud ja hinnangud on ajakohased? <a href=\"https:\/\/viqtor.eu\/et\/kontakt\/\">Hankige faktid Viqtori eksperdilt<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a1d3388 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"a1d3388\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/et\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">R\u00e4\u00e4kige Viqtor\u00ae eksperdiga<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5a1ad9a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5a1ad9a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c6404d5 ot-flex-column-vertical\" data-id=\"c6404d5\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ab57fe7 elementor-widget elementor-widget-text-editor\" data-id=\"ab57fe7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Mida valitsus teeb \u2013 ja mida peaksite teie omakorda tegema<\/h2><div><h3>200 miljonit eurot ja uus digiasutus<\/h3><p>Aprilli l\u00f5pus avalikustas peaminister S\u00e9bastien Lecornu oma plaani: 200 miljonit eurot tugevdamiseks <b>k\u00fcberturvalisus <\/b>riigi, digitaalk\u00fcsimuste ministeeriumidevahelise direktoraadi ja avaliku sektori \u00fcmberkujundamise direktoraadi \u00fchendamine, et luua peaministri kantseleile alluv digitaalne asutus. P\u00e4rast seda<b>ANSSI<\/b> on avaldanud ministeeriumidele uued juhised: iga\u00fcks peab m\u00e4\u00e4rama n\u00f5uniku <b>k\u00fcberturvalisus<\/b>See pole v\u00e4het\u00e4htis. Kui riik sellisel tasandil \u00fcmber korraldab, t\u00e4hendab see, et ta peab maja p\u00f5levaks. Kuid selles ahelas tellivad valitsusasutused palju teenuseid allt\u00f6\u00f6v\u00f5tjalt \u2013 ja iga teenusepakkuja on potentsiaalne sisenemispunkt.<\/p><h3>Mitmefaktoriline autentimine: meede, mis oleks v\u00f5inud \u00e4ra hoida palju trag\u00f6\u00f6diaid<\/h3><p>Seal <b>CNIL <\/b>r\u00f5hutab lihtsat s\u00f5numit: enamikku hiljutistest suurematest r\u00fcnnakutest oleks saanud v\u00e4ltida <b>mitmefaktoriline autentimine<\/b> \u00f5igesti paigutatud. <b>Maisterfinantseerimine<\/b>Just see kahetine tegur muudab suure osa tehnikatest ebaefektiivseks. <b>volituste lisamine<\/b> ja <b>andmep\u00fc\u00fck<\/b>Ametiasutus avaldas oma soovituse juba 2025. aasta m\u00e4rtsis, andes organisatsioonidele aega kohanemiseks, ja kuulutab n\u00fc\u00fcd v\u00e4lja sihip\u00e4rased kontrollimeetmed. 2026. aastal keskendub 50% j\u00f5ustamismeetmetest j\u00e4rgmisele: <b>k\u00fcberturvalisus<\/b>, v\u00f5rreldes veerandi kuni kolmandikuga 2025. aastal. Baaside puhul, kus on \u00fcle miljoni inimese, on kontrollid esmat\u00e4htsad.<\/p><h3>Sel n\u00e4dalal k\u00e4ivitatakse m\u00f5ned konkreetsed projektid<\/h3><p>Meeskondi \u00fcle koormamata on m\u00f5ned tegevused, mida saab kiiresti v\u00f5tta ja mis intsidendi korral reaalselt muutusi toovad. Siin on see, mida ma oma juhtivt\u00f6\u00f6tajatest klientidele soovitan, kui nad k\u00fcsivad, kust alustada.<\/p><ul><li>Aktiveeri <b>Maisterfinantseerimine <\/b>k\u00f5igil privilegeeritud kontodel ja juurdep\u00e4\u00e4sul t\u00f6\u00f6riistadele, mis sisaldavad <b>isikuandmed<\/b>.<\/li><li>Uuendage oma allt\u00f6\u00f6v\u00f5tjate nimekirja ja kontrollige, et iga\u00fchel neist oleks olemas <b>Andmekaitse <\/b>allkirjastatud ja tuvastage need, kes seda teevad <b>andmeedastus<\/b> v\u00e4ljaspool EL-i.<\/li><li>Testige oma protseduuri <b>rikkumise teatis<\/b> Kes keda teavitab? Kas suudad s\u00fcndmuste ahelat j\u00e4lgida kuni hetkeni, mil... <b>CNIL <\/b>seadusliku t\u00e4htaja jooksul <b>72 tundi<\/b> ?<\/li><li>Dokumenteerimine <b>AIPD<\/b> (<b>m\u00f5juanal\u00fc\u00fcs<\/b>) teie k\u00f5rge riskiga ravimeetodite puhul \u2014 see on teine punkt, mida <b>CNIL <\/b>s\u00fcstemaatilised kontrollid.<\/li><li>Heida veel \u00fcks kiire pilk oma <b>t\u00f6\u00f6tlemistoimingute register<\/b> : see on harva nii ajakohane, kui v\u00f5iks arvata.<\/li><\/ul><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-391fcbf ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"391fcbf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9991cf ot-flex-column-vertical\" data-id=\"d9991cf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67924a8 elementor-widget elementor-widget-text-editor\" data-id=\"67924a8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Ja mis juhtub p\u00e4rast leket? Juhtumite haldamine, kus k\u00f5ik s\u00f5ltub.<\/h2><div><h3>Esimesed 72 tundi otsustavad \u00fclej\u00e4\u00e4nu.<\/h3><p>Kui teenusepakkuja teid teavitab, on teil <b>72 tundi<\/b> teavitama <b>CNIL <\/b>kui <b>andmete leke<\/b> kujutab endast ohtu inimestele. Mitte kolm n\u00e4dalat. Pole piisavalt aega juhtkomitee kokkukutsumiseks. Protseduur peab olema valmis, kirjutatud, testitud ja p\u00fchap\u00e4eva \u00f5htul aktiveerimiseks valmis. Meie leht, mis on p\u00fchendatud... <a href=\"https:\/\/viqtor.eu\/et\/andmete-rikkumise-deklaratsioon\/\">andmete rikkumise avaldus<\/a> kirjeldab samme, et v\u00e4ltida tagurpidi tegemist.<\/p><h3>Asjaosaliste teavitamine, t\u00f5e hetk<\/h3><p>Kui rikkumine kujutab endast suurt ohtu \u00fcksikisikute \u00f5igustele ja vabadustele, n\u00f5uab GDPR ka iga \u00fcksikisiku otsest teavitamist. Tihti on just sel hetkel kriisikommunikatsioon \u00f5iguslike meetmete ees t\u00e4htsam. Halva juhtimise korral usaldus variseb kokku \u2013 Marie-Laure Denis r\u00e4\u00e4gib valitsuse lekete puhul isegi &quot;riigi ja kodanike vahelise usaldussideme murenemisest&quot;. Eraettev\u00f5tte jaoks t\u00e4hendab see kliendi lahkumist ja advokaadi saabumist.<\/p><h3>Sanktsioon ja mida see \u00fctleb organisatsiooni k\u00fcpsuse kohta<\/h3><p>Seal <b>CNIL <\/b>See ei karista p\u00f5genemist ennast; see karistab eba\u00f5nnestumisi, mis selle v\u00f5imalikuks tegid v\u00f5i seda s\u00fcvendasid. Puudumine<b>mitmefaktoriline autentimine<\/b>mittet\u00e4ielik register, \u00fcldised allt\u00f6\u00f6v\u00f5tulepingud, hilinenud teatamine, <b>vastutus <\/b>olematu. Siia ehitatakse kaitse \u2013 v\u00f5i hukkam\u00f5ist. Et kogu see struktuur oleks usaldusv\u00e4\u00e4rne, on meie <a href=\"https:\/\/viqtor.eu\/et\/gdpr-i-vastavusauditi-juhend\/\">T\u00e4ielik juhend GDPR-i vastavusauditite kohta<\/a> kirjeldab meie konsultantide kasutatavat metoodikat.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1c2f757 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1c2f757\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-02dad30 ot-flex-column-vertical\" data-id=\"02dad30\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b25d845 elementor-widget elementor-widget-heading\" data-id=\"b25d845\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">KKK <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1131cac elementor-widget elementor-widget-toggle\" data-id=\"1131cac\" data-element_type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1801\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1801\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Minu teenusepakkuja on kannatanud andmetega seotud rikkumise all. Kas mina olen vastutav?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1801\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1801\"><p>Kuiv\u00f5rd <b>andmet\u00f6\u00f6tleja<\/b>Jah, teie j\u00e4\u00e4te andmet\u00f6\u00f6tluse eest juriidiliselt vastutavaks isegi siis, kui leke p\u00e4rineb teie allt\u00f6\u00f6v\u00f5tjalt. Te peate riski anal\u00fc\u00fcsima ja allt\u00f6\u00f6v\u00f5tjat teavitama. <b>CNIL<\/b> vajadusel <b>72 tundi<\/b>ja vajadusel teavitage asjaomaseid isikuid. Teie <b>allt\u00f6\u00f6v\u00f5tuleping<\/b> <b>GDPR <\/b>peab planeerima, kuidas teenusepakkuja teid teavitab ja teiega koost\u00f6\u00f6d teeb.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1802\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1802\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kas mitmefaktoriline autentimine on kohustuslik?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1802\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1802\"><p>GDPR-is pole seda otses\u00f5nu \u00f6eldud, aga <b>CNIL <\/b>peab seda eeldatavaks tehniliseks meetmeks igasuguse juurdep\u00e4\u00e4su jaoks <b>isikuandmed<\/b> tundlik v\u00f5i ulatuslik. Selle 2025. aasta m\u00e4rtsi soovitus on selges\u00f5naline ja 2026. aasta auditid on suunatud peamiselt organisatsioonidele, kes pole seda veel rakendanud. L\u00fchidalt: see ei ole enam valikuline.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1803\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1803\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Milline on t\u00e4htaeg CNIL-ile andmetega seotud rikkumisest teatamiseks?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1803\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1803\"><p><b>72 tundi<\/b> alates hetkest, mil intsidendist teatatakse, v\u00e4lja arvatud juhul, kui rikkumine t\u00f5en\u00e4oliselt ei kujuta endast ohtu \u00fcksikisikute \u00f5igustele ja vabadustele. Sellest ajast alates tuleb hilinenud teatamist p\u00f5hjendada. Teade esitatakse veebiteenuse kaudu <b>CNIL<\/b> ning see peab kirjeldama rikkumise olemust, kaasatud andmekategooriaid ja v\u00f5etud meetmeid.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1804\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1804\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Millised on esimesed sammud, mida VKE peaks rakendama?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1804\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1804\"><p>Ravimeetodite kaardistamine ja s\u00e4ilitamine <b>t\u00f6\u00f6tlemistoimingute register<\/b> hoidke end kursis allt\u00f6\u00f6v\u00f5tjatega, tuvastage need ja s\u00f5lmige nendega n\u00f5uetekohased lepingud <b>Andmekaitse<\/b>kasutusele v\u00f5tta <b>Maisterfinantseerimine<\/b>kirjuta protseduur <b>rikkumise teatis<\/b>ja m\u00e4\u00e4rake viitaja v\u00f5i <b>Andmekaitseametnik<\/b>Need viis ehitusplatsi h\u00f5lmavad olulisi kontrollpunkte. <b>CNIL<\/b>.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1805\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1805\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Mis on andmekaitsealase m\u00f5juhinnangu (DPIA) eesm\u00e4rk ja millal tuleks see l\u00e4bi viia?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1805\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1805\"><p>L&#039;<b>AIPD<\/b> (<b>m\u00f5juanal\u00fc\u00fcs<\/b>Riskianal\u00fc\u00fcs on kohustuslik t\u00f6\u00f6tlemistegevuste puhul, mis kujutavad endast suurt ohtu \u00f5igustele ja vabadustele: ulatuslik j\u00e4lgimine, tundlikud andmed, automatiseeritud profiilianal\u00fc\u00fcs jne. See dokumenteerib riskid, nende leevendamise meetmed ja n\u00e4itab teie riskijuhtimise l\u00e4henemisviisi.<b>vastutus<\/b>See on \u00fcks esimesi dokumente, mis <b>CNIL <\/b>taotlus kontrolli korral.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Mon prestataire a subi une fuite de donn\\u00e9es. Est-ce que je suis responsable ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>En tant que <b>responsable de traitement<\\\/b>, oui, vous restez juridiquement responsable du traitement, m\\u00eame si la fuite vient de votre sous-traitant. Vous devez analyser le risque, notifier la <b>CNIL<\\\/b> si n\\u00e9cessaire dans les <b>72 heures<\\\/b>, et le cas \\u00e9ch\\u00e9ant informer les personnes concern\\u00e9es. Votre <b>contrat de sous-traitance<\\\/b> <b>RGPD <\\\/b>doit pr\\u00e9voir comment le prestataire vous alerte et coop\\u00e8re.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"L'authentification multifacteur est-elle obligatoire ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Elle n&rsquo;est pas inscrite noir sur blanc dans le RGPD, mais la <b>CNIL <\\\/b>la consid\\u00e8re comme une mesure technique attendue pour tout acc\\u00e8s \\u00e0 des <b>donn\\u00e9es personnelles<\\\/b> sensibles ou \\u00e0 grande \\u00e9chelle. Sa recommandation de mars 2025 est explicite, et les contr\\u00f4les 2026 viseront en priorit\\u00e9 les organismes qui ne l&rsquo;auraient pas d\\u00e9ploy\\u00e9e. En clair : ce n&rsquo;est plus une option.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quel d\\u00e9lai pour notifier une violation de donn\\u00e9es \\u00e0 la CNIL ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p><b>72 heures<\\\/b> \\u00e0 compter de la prise de connaissance de l&rsquo;incident, sauf si la violation n&rsquo;est pas susceptible d&rsquo;engendrer un risque pour les droits et libert\\u00e9s des personnes. Au-del\\u00e0, une notification tardive doit \\u00eatre motiv\\u00e9e. La d\\u00e9claration se fait via le t\\u00e9l\\u00e9service de la <b>CNIL<\\\/b> et doit d\\u00e9crire la nature de la violation, les cat\\u00e9gories de donn\\u00e9es concern\\u00e9es et les mesures prises.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sont les premi\\u00e8res actions \\u00e0 mettre en place pour une PME ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Cartographier les traitements et tenir un <b>registre des activit\\u00e9s de traitement<\\\/b> \\u00e0 jour, identifier et contractualiser correctement chaque sous-traitant via un <b>DPA<\\\/b>, d\\u00e9ployer le <b>MFA<\\\/b>, \\u00e9crire une proc\\u00e9dure de <b>notification de violation<\\\/b>, et d\\u00e9signer un r\\u00e9f\\u00e9rent ou un <b>DPO<\\\/b>. Ces cinq chantiers couvrent l&rsquo;essentiel des points de contr\\u00f4le <b>CNIL<\\\/b>.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"\\u00c0 quoi sert une AIPD et quand faut-il en faire une ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>L&rsquo;<b>AIPD<\\\/b> (<b>analyse d&rsquo;impact<\\\/b>) est obligatoire pour les traitements pr\\u00e9sentant un risque \\u00e9lev\\u00e9 pour les droits et libert\\u00e9s : surveillance \\u00e0 grande \\u00e9chelle, donn\\u00e9es sensibles, profilage automatis\\u00e9, etc. Elle documente les risques, les mesures pour les r\\u00e9duire, et d\\u00e9montre votre d\\u00e9marche d&rsquo;<b>accountability<\\\/b>. C&rsquo;est l&rsquo;un des premiers documents que la <b>CNIL <\\\/b>demande en cas de contr\\u00f4le.<\\\/p>\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-58cdd38 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"58cdd38\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-42fa8a7 ot-flex-column-vertical\" data-id=\"42fa8a7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-73cfdbe elementor-widget elementor-widget-text-editor\" data-id=\"73cfdbe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Kas soovite need \u00f5ppetunnid konkreetseks tegevuskavaks muuta?<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d84722f elementor-align-center elementor-widget elementor-widget-button\" data-id=\"d84722f\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/et\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\"> R\u00e4\u00e4gime sellest Viqtori eksperdiga<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c3438bb ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c3438bb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9aacbe ot-flex-column-vertical\" data-id=\"d9aacbe\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-566c278 elementor-widget elementor-widget-text-editor\" data-id=\"566c278\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Lisateabe saamiseks leiate k\u00f5ik meie ressursid aadressilt <a href=\"https:\/\/viqtor.eu\/et\/andmehaldus\/\">andmehaldus<\/a> ja GDPR-i vastavus <a href=\"https:\/\/viqtor.eu\/et\">Viqtori platvorm<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>CNIL-i andmetel oodatakse 2025. aastal rekordarvu andmelekkeid. Allt\u00f6\u00f6v\u00f5tjad, v\u00e4lisministeerium, 72-tunnine etteteatamine: mida peate teadma ja tegema kohe.<\/p>","protected":false},"author":3,"featured_media":14327,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[37],"tags":[],"class_list":["post-14221","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme<\/title>\n<meta name=\"description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viqtor.eu\/et\/cnil-on-andmelekke-parast-mures\/\" \/>\n<meta property=\"og:locale\" content=\"et_EE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme\" \/>\n<meta property=\"og:description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viqtor.eu\/et\/cnil-on-andmelekke-parast-mures\/\" \/>\n<meta property=\"og:site_name\" content=\"Viqtor\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-01T09:02:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-02T08:39:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1365\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"hedi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hedi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"author\":{\"name\":\"hedi\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\"},\"headline\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"wordCount\":2198,\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"et\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"url\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"description\":\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.\",\"breadcrumb\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\"},\"inLanguage\":\"et\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"et\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\",\"url\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"contentUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"width\":2560,\"height\":1365},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/viqtor.eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viqtor.eu\/#website\",\"url\":\"https:\/\/viqtor.eu\/\",\"name\":\"Viqtor\",\"description\":\"Faites du RGPD une opportunit\u00e9 pour votre entreprise.\",\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viqtor.eu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"et\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/viqtor.eu\/#organization\",\"name\":\"viqtor.eu\",\"url\":\"https:\/\/viqtor.eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"et\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"viqtor.eu\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\",\"name\":\"hedi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"et\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"caption\":\"hedi\"},\"url\":\"https:\/\/viqtor.eu\/et\/author\/hedi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viqtor.eu\/et\/cnil-on-andmelekke-parast-mures\/","og_locale":"et_EE","og_type":"article","og_title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","og_description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","og_url":"https:\/\/viqtor.eu\/et\/cnil-on-andmelekke-parast-mures\/","og_site_name":"Viqtor","article_published_time":"2026-07-01T09:02:11+00:00","article_modified_time":"2026-07-02T08:39:33+00:00","og_image":[{"width":2560,"height":1365,"url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png","type":"image\/jpeg"}],"author":"hedi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hedi","Est. reading time":"10 minutit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article","isPartOf":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"author":{"name":"hedi","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc"},"headline":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","mainEntityOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"wordCount":2198,"publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","articleSection":["Blog"],"inLanguage":"et"},{"@type":"WebPage","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","url":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","name":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","isPartOf":{"@id":"https:\/\/viqtor.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","breadcrumb":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb"},"inLanguage":"et","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"]}]},{"@type":"ImageObject","inLanguage":"et","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage","url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","contentUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","width":2560,"height":1365},{"@type":"BreadcrumbList","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/viqtor.eu\/"},{"@type":"ListItem","position":2,"name":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b"}]},{"@type":"WebSite","@id":"https:\/\/viqtor.eu\/#website","url":"https:\/\/viqtor.eu\/","name":"Viqtor","description":"Faites du RGPD une opportunit\u00e9 pour votre entreprise.","publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viqtor.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"et"},{"@type":"Organization","@id":"https:\/\/viqtor.eu\/#organization","name":"viqtor.eu","url":"https:\/\/viqtor.eu\/","logo":{"@type":"ImageObject","inLanguage":"et","@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"viqtor.eu"},"image":{"@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc","name":"hedi","image":{"@type":"ImageObject","inLanguage":"et","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","caption":"hedi"},"url":"https:\/\/viqtor.eu\/et\/author\/hedi\/"}]}},"_links":{"self":[{"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/posts\/14221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/comments?post=14221"}],"version-history":[{"count":26,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/posts\/14221\/revisions"}],"predecessor-version":[{"id":14331,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/posts\/14221\/revisions\/14331"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/media\/14327"}],"wp:attachment":[{"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/media?parent=14221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/categories?post=14221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viqtor.eu\/et\/wp-json\/wp\/v2\/tags?post=14221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}