{"id":14221,"date":"2026-07-01T09:02:11","date_gmt":"2026-07-01T09:02:11","guid":{"rendered":"https:\/\/viqtor.eu\/?p=14221"},"modified":"2026-07-02T08:39:33","modified_gmt":"2026-07-02T08:39:33","slug":"violations-de-donnees-cnil-tire-sonnette-alarme","status":"publish","type":"post","link":"https:\/\/viqtor.eu\/hr\/cnil-upozorava-na-povrede-podataka\/","title":{"rendered":"Kr\u0161enje podataka: CNIL di\u017ee uzbunu, a i mi to \u010dinimo."},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14221\" class=\"elementor elementor-14221\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2d75f86 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2d75f86\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6e589fb ot-flex-column-vertical elementor-invisible\" data-id=\"6e589fb\" data-element_type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;fadeInLeft&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a030734 elementor-widget elementor-widget-heading\" data-id=\"a030734\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Kr\u0161enje podataka: CNIL di\u017ee uzbunu, a mi se sla\u017eemo.<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7345c5d5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7345c5d5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-11f89eef ot-flex-column-vertical\" data-id=\"11f89eef\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6dd20d9a elementor-widget elementor-widget-text-editor\" data-id=\"6dd20d9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Prije dva tjedna, jedan direktor me nazvao u panici. Jedan od njegovih pru\u017eatelja usluga upravo je pretrpio kiberneti\u010dki napad. Datoteke njegovih klijenata, za koje je mislio da su dobro za\u0161ti\u0107ene kod &quot;certificiranog&quot; SaaS pru\u017eatelja usluga, bile su javno dostupne. Prvo pitanje koje mi je postavio bilo je: &quot;Pa, to je njihov problem, zar ne?&quot; Pa ne. To je i njegov. I upravo je to jedna od klju\u010dnih zaklju\u010daka iz godi\u0161njeg izvje\u0161\u0107a koje je objavio... <b>CNIL <\/b>18. svibnja: <b>curenje podataka<\/b> eksplodiraju, a lanac podizvo\u0111a\u010da je gotovo uvijek u jednad\u017ebi.<\/p><p>6.167 obavijesti o <b>kr\u0161enje podataka<\/b> zabilje\u017eeno 2025. godine. Rekordnih 9,5 % vi\u0161e nego 2024. godine, a prvi kvartal 2026. ve\u0107 prati isti trend s 2730 incidenata. Iza ovih brojki stoje milijuni pogo\u0111enih Francuza, uzdrmanih poduze\u0107a i jasna poruka Marie-Laure Denis, predsjednice <b>CNIL<\/b> tamo <b>kiberneti\u010dka sigurnost <\/b>stanje dr\u017eave, kao i stanje tvrtki, &quot;daleko je od zadovoljavaju\u0107eg&quot;.<\/p><div class=\"wp-block-buttons\"><p><!-- \/wp:button --><\/p><\/div><p><!-- \/wp:buttons --><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c6ed5c5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c6ed5c5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5b31466 ot-flex-column-vertical\" data-id=\"5b31466\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1dd04c elementor-widget elementor-widget-text-editor\" data-id=\"f1dd04c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Ukratko<\/h2><ul><li>Apsolutni rekord <b>kr\u0161enja podataka<\/b> U Francuskoj 2025.: 6.167 obavijesti, +9,5 % tijekom jedne godine, a prvi kvartal 2026. potvr\u0111uje trend.<\/li><li>THE <b>curenje podataka<\/b> postaju sve masovniji, s javnom upravom u prvom planu, i vrlo \u010desto uklju\u010duju pru\u017eatelja usluga.<\/li><li>Evaluacija i ugovorni okvir <b>Podizvo\u0111a\u010d za GDPR<\/b> postali su primarna obveza: a <b>DPA <\/b>Uskla\u0111enost, revizije i pra\u0107enje su osnova.<\/li><li><b>Vi\u0161efaktorska autentifikacija <\/b>(<b>MFA<\/b>) je sada mjera koju <b>CNIL <\/b>\u010deka prema zadanim postavkama. Godine 2026., 50 % njegovih kontrola usredoto\u010dit \u0107e se na <b>kiberneti\u010dka sigurnost<\/b>.<\/li><li>Postupak od <b>obavijest o kr\u0161enju<\/b> testirano, a\u017euriranje <b>registar aktivnosti obrade<\/b> i ostvarenje <b>AIPD <\/b>napraviti svu razliku na veliki dan.<\/li><li>Uskla\u0111enost se ne dokazuje namjerama, ve\u0107 dokumentima: to je to.<b>odgovornost.<\/b><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c26d073 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c26d073\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-258e34b ot-flex-column-vertical\" data-id=\"258e34b\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e634570 elementor-widget elementor-widget-text-editor\" data-id=\"e634570\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2><span style=\"color: black;\">\u0160to (zapravo) ka\u017ee godi\u0161nje izvje\u0161\u0107e CNIL-a<\/span><\/h2><div><h3>&quot;Sve masovnija&quot; kr\u0161enja<\/h3><p>Izvje\u0161\u0107e ne samo da broji. Ono daje sliku. Oko \u010detrdeset incidenata u 2025. godini utjecalo je na vi\u0161e od milijun ljudi - deset vi\u0161e nego u 2024. Javna uprava prednja\u010di s 19 milijuna prijavljenih incidenata, a slijede zdravstvo, socijalne usluge, te financijske i osiguravaju\u0107e djelatnosti. I to nije sve: ova brojka ne uklju\u010duje ni kiberneti\u010dke napade na softver Weda i Harvest, koji su sami po sebi generirali vi\u0161e od 11 600 obavijesti o korisnicima. Jedan incident uzvodno, tisu\u0107e tvrtki nizvodno. To sve govori.<\/p><h3>Tri lekcije koje se moraju nau\u010diti<\/h3><p>Tamo <b>CNIL <\/b>Pojavljuju se tri klju\u010dna zapa\u017eanja koja bi svaki vo\u0111a trebao istaknuto istaknuto istaknuti u izvr\u0161nom odboru. Prvo: nitko nije po\u0161te\u0111en. Sportski savezi, hotelski lanci, uzajamna osiguravaju\u0107a dru\u0161tva, lokalne vlasti, mala i srednja poduze\u0107a, kao i velike korporacije - prijetnja vi\u0161e nema tipi\u010dan profil. Drugo: <b>curenje podataka<\/b> Oni se odnose na sve ve\u0107e koli\u010dine. Tre\u0107e, i tu se tema nadovezuje na na\u0161e prethodne \u010dlanke: ovi incidenti \u010desto uklju\u010duju pru\u017eatelje usluga. <b>Podizvo\u0111a\u010d za GDPR<\/b> postala je najizlo\u017eenija veza.<\/p><h3>Metoda napada\u010da postaje uobi\u010dajena.<\/h3><p>Hakiranje \u010dini polovicu svih prijavljenih incidenata. Iza ove rije\u010di krije se cijeli niz problema: <b>ransomware, phishing, kr\u0161enje vjerodajnica<\/b>, kra\u0111a legitimnih korisni\u010dkih ra\u010duna. Uz to, 13 incidenata proizlazi iz pogre\u0161nog primatelja koji je kopiran u e-poruci, 7 iz gubitka hardvera i 7 iz slu\u010dajnog objavljivanja. Ukratko, ljudska pogre\u0161ka ostaje zna\u010dajan faktor. A tu je i generativna umjetna inteligencija koja, rije\u010dima predsjednika <b>CNIL<\/b>Slu\u010daj ANTS, u kojem je 15-godi\u0161nji maloljetnik - &quot;ne \u010dudo od djeteta&quot;, precizirao je tu\u017eitelj - umije\u0161an nakon hakiranja agencije za sigurne dokumente, jeziv je dokaz toga.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b930d9d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b930d9d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-772bccc ot-flex-column-vertical\" data-id=\"772bccc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1cad34 elementor-widget elementor-widget-text-editor\" data-id=\"f1cad34\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Za\u0161to su va\u0161i podizvo\u0111a\u010di (jo\u0161 uvijek) u sredi\u0161tu problema<\/h2><div><h3>Kada pru\u017eatelj usluga padne, s njim padaju i njegovi klijenti.<\/h3><p>Vratimo se na pri\u010du o softveru Weda i Harvest. Bila su to dva kiberneti\u010dka napada, ali je nadle\u017eno tijelo primilo 11 600 obavijesti. Jer svaki put iza izdava\u010da softvera stoje stotine medicinskih ordinacija, stotine savjetnika za upravljanje imovinom, koji su tako\u0111er pogo\u0111eni. <b>kontrolor podataka<\/b> i moraju prijaviti curenje vlastitim kupcima. Upravo je to scenarij podizvo\u0111a\u010da Mobiusa\/Deezera koji <b>CNIL <\/b>Krajem 2025. izrekla je kaznu od milijun eura - osim \u0161to se ovdje tro\u0161ak multiplicira. Jedan napad, tisu\u0107u profesionalnih \u017ertava, milijuni pogo\u0111enih ljudi.<\/p><h3>Preliminarna procjena: va\u0161a najbolja (i jedina) za\u0161tita<\/h3><p>GDPR ne ostavlja mjesta sumnji: a <b>kontrolor podataka<\/b> \u201ekoristi samo podizvo\u0111a\u010de koji nude dovoljna jamstva.\u201c Ova obveza, utvr\u0111ena u \u010dlanku 28. stavku 1., nije pusti san. To je ono \u0161to \u0107e inspektori tra\u017eiti. Konkretno, \u0161aljete li upitnik za evaluaciju svakom pru\u017eatelju usluga? Pitate li o njihovoj sigurnosnoj politici, njihovoj <b>registar aktivnosti obrade<\/b>, njihovo ime <b>DPO<\/b>Njihove certifikate? Jeste li identificirali svoje <b>prijenosi podataka<\/b> Izvan EU? Ako je odgovor na bilo koje od ovih pitanja &quot;hm&quot;, imate svoj prvi operativni prioritet.<\/p><h3>Sam ugovor nije dovoljan, niti revizija, ali oboje zajedno, da.<\/h3><p>A <b>Ugovor o podugovaranju u skladu s GDPR-om<\/b> dobro napisano - to jest <b>DPA<\/b> Ponovno navo\u0111enje osam obveznih odredbi \u010dlanka 28. \u00a73. je po\u010detna to\u010dka. Ne krajnji cilj. Dugoro\u010dno upravljanje je tako\u0111er bitno: godi\u0161nje revizije, pregledi sljede\u0107ih podizvo\u0111a\u010da, pra\u0107enje <b>tehni\u010dke i organizacijske mjere <\/b>u\u010dinkovito primijenjeno. Za strukturiranje ovog pristupa, <a href=\"https:\/\/viqtor.eu\/hr\/modul-podizvodaca\/\">Viqtor modul za podizvo\u0111a\u010de<\/a> centralizira procjene, ugovore, revizije i povijest transakcija u jednom repozitoriju. To je vrsta dokaza koju kontrolor <b>CNIL <\/b>Volim vidjeti.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-06a5fd8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"06a5fd8\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b73a781 ot-flex-column-vertical\" data-id=\"b73a781\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-16bd074 elementor-widget elementor-widget-text-editor\" data-id=\"16bd074\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Jesu li va\u0161i ugovori s podizvo\u0111a\u010dima i evaluacije a\u017eurni? <a href=\"https:\/\/viqtor.eu\/hr\/kontakt\/\">Saznajte \u010dinjenice od stru\u010dnjaka Viqtora<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a1d3388 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"a1d3388\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/hr\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Razgovarajte sa stru\u010dnjakom za Viqtor\u00ae<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5a1ad9a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5a1ad9a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c6404d5 ot-flex-column-vertical\" data-id=\"c6404d5\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ab57fe7 elementor-widget elementor-widget-text-editor\" data-id=\"ab57fe7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>\u0160to vlada radi - i \u0161to biste vi trebali u\u010diniti zauzvrat<\/h2><div><h3>200 milijuna eura i novi digitalni autoritet<\/h3><p>Krajem travnja, premijer S\u00e9bastien Lecornu predstavio je svoj plan: 200 milijuna eura za ja\u010danje <b>kiberneti\u010dka sigurnost <\/b>dr\u017eave, spajanje me\u0111uministarske uprave za digitalne poslove i uprave za javnu transformaciju kako bi se stvorilo digitalno tijelo pri uredu premijera. Nakon toga,<b>ANSSI<\/b> objavila je nove smjernice za ministarstva: svako mora imenovati savjetnika <b>kiberneti\u010dka sigurnost<\/b>To nije bezna\u010dajno. Kada se dr\u017eava reorganizira na ovoj razini, to zna\u010di da smatra da ku\u0107a gori. Me\u0111utim, u lancu, vladini odjeli mnogo toga prepu\u0161taju vanjskim suradnicima - i svaki pru\u017eatelj usluga je potencijalna to\u010dka ulaska.<\/p><h3>Vi\u0161efaktorska autentifikacija: mjera koja je mogla sprije\u010diti mnoge tragedije<\/h3><p>Tamo <b>CNIL <\/b>sna\u017eno nagla\u0161ava jednostavnu poruku: ve\u0107ina nedavnih velikih napada mogla se izbje\u0107i s <b>vi\u0161efaktorska autentifikacija<\/b> ispravno raspore\u0111eno. <b>MFA<\/b>Upravo taj dvostruki faktor \u010dini velik dio tehnika neu\u010dinkovitim. <b>popunjavanje vjerodajnica<\/b> i <b>kra\u0111a identiteta<\/b>Tijelo je objavilo svoju preporuku ve\u0107 u o\u017eujku 2025., daju\u0107i organizacijama vremena za prilagodbu, a sada najavljuje ciljane kontrole. U 2026. godini, 50% provedbenih mjera usredoto\u010dit \u0107e se na <b>kiberneti\u010dka sigurnost<\/b>, u usporedbi s \u010detvrtinom do tre\u0107inom u 2025. Za baze koje sadr\u017ee vi\u0161e od milijun ljudi, provjere \u0107e biti prioritet.<\/p><h3>Neki konkretni projekti bit \u0107e pokrenuti ovog tjedna<\/h3><p>Bez preoptere\u0107enja timova, postoji nekoliko radnji koje se mogu brzo poduzeti i koje mogu napraviti stvarnu razliku u slu\u010daju incidenta. Evo \u0161to preporu\u010dujem svojim klijentima na rukovode\u0107im pozicijama kada me pitaju odakle po\u010deti.<\/p><ul><li>Aktivirajte <b>MFA <\/b>na svim privilegiranim ra\u010dunima i na pristupu alatima koji sadr\u017ee <b>osobni podaci<\/b>.<\/li><li>A\u017eurirajte popis podizvo\u0111a\u010da i provjerite ima li svaki od njih <b>DPA <\/b>potpisani i identificirati one koji provode <b>prijenosi podataka<\/b> izvan EU.<\/li><li>Testirajte svoj postupak <b>obavijest o kr\u0161enju<\/b> Tko koga obavje\u0161tava? Mo\u017eete li pratiti slijed doga\u0111aja do... <b>CNIL <\/b>unutar zakonskog roka od <b>72 sata<\/b> ?<\/li><li>Dokumentiranje <b>AIPD<\/b> (<b>analiza utjecaja<\/b>) za va\u0161e visokorizi\u010dne tretmane - to je druga stvar koju <b>CNIL <\/b>sustavne provjere.<\/li><li>Jo\u0161 jednom brzo pogledajte svoje <b>registar aktivnosti obrade<\/b> Rijetko je toliko a\u017eurno koliko bi se moglo pomisliti.<\/li><\/ul><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-391fcbf ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"391fcbf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9991cf ot-flex-column-vertical\" data-id=\"d9991cf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67924a8 elementor-widget elementor-widget-text-editor\" data-id=\"67924a8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>A \u0161to se doga\u0111a nakon curenja? Upravljanje incidentima, gdje sve ovisi.<\/h2><div><h3>Prvih 72 sata odlu\u010duje o ostatku<\/h3><p>Kada vas davatelj usluga upozori, imate <b>72 sata<\/b> obavijestiti <b>CNIL <\/b>ako <b>curenje podataka<\/b> predstavlja rizik za ljude. Ne tri tjedna. Nedovoljno vremena za sazivanje upravlja\u010dkog odbora. Postupak mora biti spreman, napisan, testiran i spreman za aktiviranje u nedjelju nave\u010der. Na\u0161a stranica posve\u0107ena <a href=\"https:\/\/viqtor.eu\/hr\/izjava-o-povredi-podataka\/\">izjava o povredi podataka<\/a> detaljno opisuje korake kako bi se izbjeglo ponavljanje unatrag.<\/p><h3>Obavje\u0161tavanje onih koji su uklju\u010deni, trenutak istine<\/h3><p>Ako kr\u0161enje predstavlja visok rizik za prava i slobode pojedinaca, GDPR tako\u0111er zahtijeva da svaki pojedinac bude izravno obavije\u0161ten. \u010cesto je u tom trenutku krizna komunikacija prednost pred pravnim postupkom. Ako se lo\u0161e upravlja, povjerenje se uru\u0161ava - Marie-Laure Denis \u010dak govori o &quot;eroziji veze povjerenja izme\u0111u dr\u017eave i njezinih gra\u0111ana&quot; u vezi s curenjem vladinih informacija. Za privatnu tvrtku to zna\u010di da klijent odlazi, a odvjetnik dolazi.<\/p><h3>Sankcija i \u0161to ona govori o zrelosti organizacije<\/h3><p>Tamo <b>CNIL <\/b>Ne ka\u017enjava sam \u010din bijega; ka\u017enjava propuste koji su ga omogu\u0107ili ili pogor\u0161ali. Odsutnost<b>vi\u0161efaktorska autentifikacija<\/b>nepotpuni registar, generi\u010dki ugovori o podugovaranju, kasna obavijest, <b>odgovornost <\/b>nepostoje\u0107i. Ovdje se gradi obrana - ili osuda. Kako bi cijela ova struktura bila pouzdana, na\u0161a <a href=\"https:\/\/viqtor.eu\/hr\/vodic-za-reviziju-uskladenosti-s-gdpr-om\/\">Potpuni vodi\u010d za revizije uskla\u0111enosti s GDPR-om<\/a> opisuje metodologiju koju koriste na\u0161i konzultanti.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1c2f757 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1c2f757\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-02dad30 ot-flex-column-vertical\" data-id=\"02dad30\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b25d845 elementor-widget elementor-widget-heading\" data-id=\"b25d845\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">\u010cesto postavljana pitanja <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1131cac elementor-widget elementor-widget-toggle\" data-id=\"1131cac\" data-element_type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1801\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1801\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Jesam li odgovoran\/na? Moj davatelj usluga pretrpio je povredu podataka.<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1801\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1801\"><p>Ukoliko <b>kontrolor podataka<\/b>Da, i dalje ste pravno odgovorni za obradu podataka, \u010dak i ako curenje podataka potje\u010de od va\u0161eg podizvo\u0111a\u010da. Morate analizirati rizik i obavijestiti <b>CNIL<\/b> ako je potrebno u <b>72 sata<\/b>i, gdje je to primjereno, obavijestiti doti\u010dne osobe. Va\u0161 <b>ugovor o podugovaranju<\/b> <b>GDPR <\/b>morate planirati kako \u0107e vas pru\u017eatelj usluga obavje\u0161tavati i sura\u0111ivati.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1802\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1802\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Je li vi\u0161efaktorska autentifikacija obavezna?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1802\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1802\"><p>To nije izri\u010dito navedeno u GDPR-u, ali <b>CNIL <\/b>smatra to o\u010dekivanom tehni\u010dkom mjerom za bilo kakav pristup <b>osobni podaci<\/b> osjetljive ili velikih razmjera. Njegova preporuka iz o\u017eujka 2025. je eksplicitna, a revizije iz 2026. prvenstveno \u0107e biti usmjerene na organizacije koje je nisu implementirale. Ukratko: vi\u0161e nije opcionalna.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1803\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1803\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Koji je rok za obavje\u0161tavanje CNIL-a o povredi podataka?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1803\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1803\"><p><b>72 sata<\/b> od trenutka prijave incidenta, osim ako je malo vjerojatno da \u0107e kr\u0161enje predstavljati rizik za prava i slobode pojedinaca. Nakon ove to\u010dke, zaka\u0161njela obavijest mora biti opravdana. Prijava se podnosi putem online usluge <b>CNIL<\/b> i mora opisati prirodu povrede, kategorije uklju\u010denih podataka i poduzete mjere.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1804\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1804\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Koje su prve akcije koje treba provesti za malo i srednje poduze\u0107e?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1804\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1804\"><p>Mapirajte tretmane i vodite evidenciju <b>registar aktivnosti obrade<\/b> biti u tijeku, identificirati i pravilno ugovoriti svakog podizvo\u0111a\u010da putem <b>DPA<\/b>rasporediti <b>MFA<\/b>napi\u0161ite postupak za <b>obavijest o kr\u0161enju<\/b>i odrediti referenta ili <b>DPO<\/b>Ovih pet gradili\u0161ta pokrivaju bitne kontrolne to\u010dke. <b>CNIL<\/b>.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1805\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1805\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Koja je svrha Procjene utjecaja na za\u0161titu podataka (DPIA) i kada je treba provesti?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1805\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1805\"><p>L&#039;<b>AIPD<\/b> (<b>analiza utjecaja<\/b>Procjena rizika je obvezna za aktivnosti obrade koje predstavljaju visok rizik za prava i slobode: nadzor velikih razmjera, osjetljivi podaci, automatizirano profiliranje itd. Ona dokumentira rizike, mjere za njihovo ubla\u017eavanje i pokazuje va\u0161 pristup upravljanju rizicima.<b>odgovornost<\/b>Ovo je jedan od prvih dokumenata koji je <b>CNIL <\/b>zahtjev u slu\u010daju inspekcije.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Mon prestataire a subi une fuite de donn\\u00e9es. Est-ce que je suis responsable ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>En tant que <b>responsable de traitement<\\\/b>, oui, vous restez juridiquement responsable du traitement, m\\u00eame si la fuite vient de votre sous-traitant. Vous devez analyser le risque, notifier la <b>CNIL<\\\/b> si n\\u00e9cessaire dans les <b>72 heures<\\\/b>, et le cas \\u00e9ch\\u00e9ant informer les personnes concern\\u00e9es. Votre <b>contrat de sous-traitance<\\\/b> <b>RGPD <\\\/b>doit pr\\u00e9voir comment le prestataire vous alerte et coop\\u00e8re.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"L'authentification multifacteur est-elle obligatoire ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Elle n&rsquo;est pas inscrite noir sur blanc dans le RGPD, mais la <b>CNIL <\\\/b>la consid\\u00e8re comme une mesure technique attendue pour tout acc\\u00e8s \\u00e0 des <b>donn\\u00e9es personnelles<\\\/b> sensibles ou \\u00e0 grande \\u00e9chelle. Sa recommandation de mars 2025 est explicite, et les contr\\u00f4les 2026 viseront en priorit\\u00e9 les organismes qui ne l&rsquo;auraient pas d\\u00e9ploy\\u00e9e. En clair : ce n&rsquo;est plus une option.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quel d\\u00e9lai pour notifier une violation de donn\\u00e9es \\u00e0 la CNIL ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p><b>72 heures<\\\/b> \\u00e0 compter de la prise de connaissance de l&rsquo;incident, sauf si la violation n&rsquo;est pas susceptible d&rsquo;engendrer un risque pour les droits et libert\\u00e9s des personnes. Au-del\\u00e0, une notification tardive doit \\u00eatre motiv\\u00e9e. La d\\u00e9claration se fait via le t\\u00e9l\\u00e9service de la <b>CNIL<\\\/b> et doit d\\u00e9crire la nature de la violation, les cat\\u00e9gories de donn\\u00e9es concern\\u00e9es et les mesures prises.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sont les premi\\u00e8res actions \\u00e0 mettre en place pour une PME ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Cartographier les traitements et tenir un <b>registre des activit\\u00e9s de traitement<\\\/b> \\u00e0 jour, identifier et contractualiser correctement chaque sous-traitant via un <b>DPA<\\\/b>, d\\u00e9ployer le <b>MFA<\\\/b>, \\u00e9crire une proc\\u00e9dure de <b>notification de violation<\\\/b>, et d\\u00e9signer un r\\u00e9f\\u00e9rent ou un <b>DPO<\\\/b>. Ces cinq chantiers couvrent l&rsquo;essentiel des points de contr\\u00f4le <b>CNIL<\\\/b>.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"\\u00c0 quoi sert une AIPD et quand faut-il en faire une ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>L&rsquo;<b>AIPD<\\\/b> (<b>analyse d&rsquo;impact<\\\/b>) est obligatoire pour les traitements pr\\u00e9sentant un risque \\u00e9lev\\u00e9 pour les droits et libert\\u00e9s : surveillance \\u00e0 grande \\u00e9chelle, donn\\u00e9es sensibles, profilage automatis\\u00e9, etc. Elle documente les risques, les mesures pour les r\\u00e9duire, et d\\u00e9montre votre d\\u00e9marche d&rsquo;<b>accountability<\\\/b>. C&rsquo;est l&rsquo;un des premiers documents que la <b>CNIL <\\\/b>demande en cas de contr\\u00f4le.<\\\/p>\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-58cdd38 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"58cdd38\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-42fa8a7 ot-flex-column-vertical\" data-id=\"42fa8a7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-73cfdbe elementor-widget elementor-widget-text-editor\" data-id=\"73cfdbe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>\u017delite li ove lekcije pretvoriti u konkretan akcijski plan?<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d84722f elementor-align-center elementor-widget elementor-widget-button\" data-id=\"d84722f\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/hr\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\"> Razgovarajmo o tome sa stru\u010dnjakom iz Viqtora<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c3438bb ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c3438bb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9aacbe ot-flex-column-vertical\" data-id=\"d9aacbe\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-566c278 elementor-widget elementor-widget-text-editor\" data-id=\"566c278\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Za vi\u0161e informacija prona\u0111ite sve na\u0161e resurse na <a href=\"https:\/\/viqtor.eu\/hr\/upravljanje-podacima\/\">upravljanje podacima<\/a> i uskla\u0111enost s GDPR-om <a href=\"https:\/\/viqtor.eu\/hr\">Viqtor platforma<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Prema CNIL-u, rekordan broj povreda podataka o\u010dekuje se u 2025. Podizvo\u0111a\u010di, MFA, 72-satna obavijest: \u0161to trebate znati i u\u010diniti sada.<\/p>","protected":false},"author":3,"featured_media":14327,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[37],"tags":[],"class_list":["post-14221","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme<\/title>\n<meta name=\"description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viqtor.eu\/hr\/cnil-upozorava-na-povrede-podataka\/\" \/>\n<meta property=\"og:locale\" content=\"hr_HR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme\" \/>\n<meta property=\"og:description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viqtor.eu\/hr\/cnil-upozorava-na-povrede-podataka\/\" \/>\n<meta property=\"og:site_name\" content=\"Viqtor\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-01T09:02:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-02T08:39:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1365\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"hedi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napisao\/la\" \/>\n\t<meta name=\"twitter:data1\" content=\"hedi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Procijenjeno vrijeme \u010ditanja\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minuta\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"author\":{\"name\":\"hedi\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\"},\"headline\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"wordCount\":2198,\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"hr\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"url\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"description\":\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.\",\"breadcrumb\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\"},\"inLanguage\":\"hr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\",\"url\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"contentUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"width\":2560,\"height\":1365},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/viqtor.eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viqtor.eu\/#website\",\"url\":\"https:\/\/viqtor.eu\/\",\"name\":\"Viqtor\",\"description\":\"Faites du RGPD une opportunit\u00e9 pour votre entreprise.\",\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viqtor.eu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hr\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/viqtor.eu\/#organization\",\"name\":\"viqtor.eu\",\"url\":\"https:\/\/viqtor.eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"viqtor.eu\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\",\"name\":\"hedi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"caption\":\"hedi\"},\"url\":\"https:\/\/viqtor.eu\/hr\/author\/hedi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viqtor.eu\/hr\/cnil-upozorava-na-povrede-podataka\/","og_locale":"hr_HR","og_type":"article","og_title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","og_description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","og_url":"https:\/\/viqtor.eu\/hr\/cnil-upozorava-na-povrede-podataka\/","og_site_name":"Viqtor","article_published_time":"2026-07-01T09:02:11+00:00","article_modified_time":"2026-07-02T08:39:33+00:00","og_image":[{"width":2560,"height":1365,"url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png","type":"image\/jpeg"}],"author":"hedi","twitter_card":"summary_large_image","twitter_misc":{"Napisao\/la":"hedi","Procijenjeno vrijeme \u010ditanja":"10 minuta"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article","isPartOf":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"author":{"name":"hedi","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc"},"headline":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","mainEntityOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"wordCount":2198,"publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","articleSection":["Blog"],"inLanguage":"hr"},{"@type":"WebPage","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","url":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","name":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","isPartOf":{"@id":"https:\/\/viqtor.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","breadcrumb":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb"},"inLanguage":"hr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"]}]},{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage","url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","contentUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","width":2560,"height":1365},{"@type":"BreadcrumbList","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/viqtor.eu\/"},{"@type":"ListItem","position":2,"name":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b"}]},{"@type":"WebSite","@id":"https:\/\/viqtor.eu\/#website","url":"https:\/\/viqtor.eu\/","name":"Viqtor","description":"Faites du RGPD une opportunit\u00e9 pour votre entreprise.","publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viqtor.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hr"},{"@type":"Organization","@id":"https:\/\/viqtor.eu\/#organization","name":"viqtor.eu","url":"https:\/\/viqtor.eu\/","logo":{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"viqtor.eu"},"image":{"@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc","name":"hedi","image":{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","caption":"hedi"},"url":"https:\/\/viqtor.eu\/hr\/author\/hedi\/"}]}},"_links":{"self":[{"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/posts\/14221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/comments?post=14221"}],"version-history":[{"count":26,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/posts\/14221\/revisions"}],"predecessor-version":[{"id":14331,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/posts\/14221\/revisions\/14331"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/media\/14327"}],"wp:attachment":[{"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/media?parent=14221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/categories?post=14221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viqtor.eu\/hr\/wp-json\/wp\/v2\/tags?post=14221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}