{"id":14221,"date":"2026-07-01T09:02:11","date_gmt":"2026-07-01T09:02:11","guid":{"rendered":"https:\/\/viqtor.eu\/?p=14221"},"modified":"2026-07-02T08:39:33","modified_gmt":"2026-07-02T08:39:33","slug":"violations-de-donnees-cnil-tire-sonnette-alarme","status":"publish","type":"post","link":"https:\/\/viqtor.eu\/sl\/cnil-opozarja-na-krsitve-podatkov\/","title":{"rendered":"Kr\u0161itve podatkov: CNIL opozarja na zaskrbljenost in mi tudi."},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"14221\" class=\"elementor elementor-14221\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-2d75f86 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"2d75f86\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6e589fb ot-flex-column-vertical elementor-invisible\" data-id=\"6e589fb\" data-element_type=\"column\" data-settings=\"{&quot;animation&quot;:&quot;fadeInLeft&quot;,&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-a030734 elementor-widget elementor-widget-heading\" data-id=\"a030734\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Kr\u0161itve podatkov: CNIL opozarja na zaskrbljenost in mi se strinjamo.<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7345c5d5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7345c5d5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-11f89eef ot-flex-column-vertical\" data-id=\"11f89eef\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6dd20d9a elementor-widget elementor-widget-text-editor\" data-id=\"6dd20d9a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Pred dvema tednoma me je pani\u010dno poklical direktor. Eden od njegovih ponudnikov storitev je pravkar utrpel kibernetski napad. Njegove datoteke strank, za katere je menil, da so dobro za\u0161\u010ditene s &quot;certificiranim&quot; ponudnikom SaaS, so bile na javnem mestu. Prvo vpra\u0161anje, ki mi ga je postavil, je bilo: &quot;No, to je njihov problem, kajne?&quot; No, ne. Tudi njegov je. In prav to je eden klju\u010dnih sklepov iz letnega poro\u010dila, ki ga je objavila <b>CNIL <\/b>18. maj: <b>uhajanje podatkov<\/b> eksplodirajo, veriga podizvajalcev pa je skoraj vedno v ena\u010dbi.<\/p><p>6.167 obvestil o <b>kr\u0161itev podatkov<\/b> zabele\u017eenih leta 2025. Rekordnih 9,5 % ve\u010d kot leta 2024, prvo \u010detrtletje leta 2026 pa \u017ee sledi istemu trendu z 2730 incidenti. Za temi \u0161tevilkami stojijo milijoni prizadetih Francozov, pretresena podjetja in jasno sporo\u010dilo Marie-Laure Denis, predsednice <b>CNIL<\/b> tam <b>kibernetska varnost <\/b>tako dr\u017eava kot podjetja &quot;dale\u010d od zadovoljivega&quot;.<\/p><div class=\"wp-block-buttons\"><p><!-- \/wp:button --><\/p><\/div><p><!-- \/wp:buttons --><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c6ed5c5 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c6ed5c5\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5b31466 ot-flex-column-vertical\" data-id=\"5b31466\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1dd04c elementor-widget elementor-widget-text-editor\" data-id=\"f1dd04c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Skratka<\/h2><ul><li>Absolutni rekord <b>kr\u0161itve podatkov<\/b> V Franciji leta 2025: 6.167 obvestil, +9,5 % v enem letu, prvo \u010detrtletje leta 2026 pa potrjuje trend.<\/li><li>TA <b>uhajanje podatkov<\/b> postajajo vse bolj obse\u017eni, v ospredju pa je javna uprava, in zelo pogosto vklju\u010dujejo ponudnika storitev.<\/li><li>Okvir za ocenjevanje in pogodbene zadeve <b>Podizvajalec GDPR<\/b> so postale glavna obveznost: a <b>DPA <\/b>Skladnost, revizije in spremljanje so osnova.<\/li><li><b>Ve\u010dfaktorska avtentikacija <\/b>(<b>MFA<\/b>) je zdaj mera, ki jo <b>CNIL <\/b>privzeto \u010daka. Leta 2026 se bo 50 % svojih kontrol osredoto\u010dilo na <b>kibernetska varnost<\/b>.<\/li><li>Postopek <b>obvestilo o kr\u0161itvi<\/b> preizku\u0161eno, posodobitev <b>register dejavnosti obdelave<\/b> in uresni\u010ditev <b>AIPD <\/b>naredite vso razliko na veliki dan.<\/li><li>Skladnost se ne dokazuje z nameni, temve\u010d z dokumenti: to je pa\u010d to.<b>odgovornost.<\/b><\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c26d073 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c26d073\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-258e34b ot-flex-column-vertical\" data-id=\"258e34b\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e634570 elementor-widget elementor-widget-text-editor\" data-id=\"e634570\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2><span style=\"color: black;\">Kaj (v resnici) pravi letno poro\u010dilo CNIL<\/span><\/h2><div><h3>&quot;Vse bolj mno\u017ei\u010dne&quot; kr\u0161itve<\/h3><p>Poro\u010dilo ne \u0161teje le. Naslika sliko. Pribli\u017eno \u0161tirideset incidentov v letu 2025 je prizadelo ve\u010d kot milijon ljudi \u2013 deset ve\u010d kot v letu 2024. Javna uprava je na prvem mestu z 19 milijoni prijavljenih incidentov, sledijo ji zdravstvo, socialne storitve ter finan\u010dne in zavarovalni\u0161ke dejavnosti. In to \u0161e ni vse: ta \u0161tevilka sploh ne vklju\u010duje kibernetskih napadov na programsko opremo Weda in Harvest, ki so sami po sebi ustvarili ve\u010d kot 11.600 obvestil strank. En sam incident prej, na tiso\u010de podjetij naprej. To pove vse.<\/p><h3>Tri lekcije, ki se jih je treba nau\u010diti<\/h3><p>Tam <b>CNIL <\/b>Pojavljajo se tri klju\u010dne ugotovitve, da bi moral vsak vodja pisati vidno v izvr\u0161nem odboru. Prvi\u010d: nih\u010de ni prizanesen. \u0160portne zveze, hotelske verige, vzajemne zavarovalnice, lokalne oblasti, mala in srednje velika podjetja ter velike korporacije \u2013 gro\u017enja nima ve\u010d tipi\u010dnega profila. Drugi\u010d: <b>uhajanje podatkov<\/b> Gre za vse ve\u010dje koli\u010dine. Tretji\u010d, in tukaj se tema navezuje na na\u0161e prej\u0161nje \u010dlanke: ti incidenti so pogosto vpleteni ponudniki storitev. <b>Podizvajalec GDPR<\/b> je postala najbolj izpostavljena povezava.<\/p><h3>Metoda napadalcev postaja vse bolj obi\u010dajna.<\/h3><p>Vdor v sistem predstavlja polovico vseh prijavljenih incidentov. Za to besedo se skriva cela vrsta te\u017eav: <b>izsiljevalska programska oprema, la\u017eno predstavljanje, prikrivanje poverilnic<\/b>, kraja legitimnih uporabni\u0161kih ra\u010dunov. Poleg tega 13 incidentov izvira iz napa\u010dnega prejemnika, ki je bil kopiran v e-po\u0161ti, 7 iz izgube strojne opreme in 7 iz nenamerne objave. Skratka, \u010dlove\u0161ka napaka ostaja pomemben dejavnik. In potem je tu \u0161e generativna umetna inteligenca, ki po besedah predsednika <b>CNIL<\/b>Primer ANTS, v katerega je po vdoru v agencijo za varne dokumente vpleten 15-letni mladoletnik \u2013 \u00bbne \u010dude\u017eni otrok,\u00ab je navedel to\u017eilec, je srhljiv dokaz tega.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b930d9d ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b930d9d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-772bccc ot-flex-column-vertical\" data-id=\"772bccc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f1cad34 elementor-widget elementor-widget-text-editor\" data-id=\"f1cad34\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Zakaj so va\u0161i podizvajalci (\u0161e vedno) v sredi\u0161\u010du problema<\/h2><div><h3>Ko ponudnik storitev pade, padejo z njim tudi njegove stranke.<\/h3><p>Vrnimo se k zgodbi o programski opremi Weda in Harvest. To sta bila dva kibernetska napada, vendar je oblast prejela 11.600 obvestil. Vsaki\u010d namre\u010d za zalo\u017enikom programske opreme stoji na stotine zdravni\u0161kih ordinacij, na stotine svetovalcev za upravljanje premo\u017eenja, ki so prav tako prizadeti. <b>upravljavec podatkov<\/b> in morajo o uhajanju poro\u010dati svojim strankam. To\u010dno to je scenarij podizvajalca Mobius\/Deezer, da <b>CNIL <\/b>Do konca leta 2025 je bila kaznovana z milijonom evrov \u2013 le da se tukaj stro\u0161ki pomno\u017eijo. En napad, tiso\u010d poklicnih \u017ertev, milijoni prizadetih ljudi.<\/p><h3>Predhodna ocena: va\u0161a najbolj\u0161a (in edina) za\u0161\u010dita<\/h3><p>GDPR ne pu\u0161\u010da prostora za dvome: a <b>upravljavec podatkov<\/b> \u201euporablja le podizvajalce, ki ponujajo zadostna jamstva.\u201c Ta obveznost, dolo\u010dena v \u010dlenu 28, odstavku 1, ni pobo\u017ena \u017eelja. To je tisto, kar bodo in\u0161pektorji iskali. Natan\u010dneje, ali vsakemu ponudniku storitev po\u0161ljete vpra\u0161alnik za ocenjevanje? Ali vpra\u0161ate o njihovi varnostni politiki, njihovi <b>register dejavnosti obdelave<\/b>, ime njihovega <b>Poobla\u0161\u010dena oseba za varstvo podatkov<\/b>Njihove certifikate? Ste \u017ee prepoznali svoje <b>prenosi podatkov<\/b> Zunaj EU? \u010ce je odgovor na katero koli od teh vpra\u0161anj &quot;eh&quot;, imate svojo prvo operativno prioriteto.<\/p><h3>Samo pogodba ni dovolj, prav tako ne revizija, ampak oboje skupaj, da.<\/h3><p>A <b>Pogodba o podizvajanju v skladu z GDPR<\/b> dobro napisano \u2013 torej <b>DPA<\/b> Ponovitev osmih obveznih dolo\u010db iz \u010dlena 28 \u00a73 \u2013 je izhodi\u0161\u010de. Ne kon\u010dni cilj. Bistveno je tudi dolgoro\u010dno upravljanje: letni pregledi, pregledi nadaljnjih podizvajalcev, spremljanje <b>tehni\u010dni in organizacijski ukrepi <\/b>u\u010dinkovito uporabljeno. Za strukturiranje tega pristopa je <a href=\"https:\/\/viqtor.eu\/sl\/modul-za-podizvajalce\/\">Modul za podizvajalce Viqtor<\/a> centralizira ocene, pogodbe, revizije in zgodovino transakcij v enem samem repozitoriju. To je vrsta dokazov, ki jih upravljavec <b>CNIL <\/b>Rad vidim.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-06a5fd8 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"06a5fd8\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-b73a781 ot-flex-column-vertical\" data-id=\"b73a781\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-16bd074 elementor-widget elementor-widget-text-editor\" data-id=\"16bd074\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Ali so va\u0161e pogodbe s podizvajalci in ocene a\u017eurne? <a href=\"https:\/\/viqtor.eu\/sl\/stik\/\">Pridobite dejstva od strokovnjaka Viqtor<\/a><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a1d3388 elementor-align-center elementor-widget elementor-widget-button\" data-id=\"a1d3388\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/sl\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Pogovorite se s strokovnjakom Viqtor\u00ae<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-5a1ad9a ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5a1ad9a\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c6404d5 ot-flex-column-vertical\" data-id=\"c6404d5\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ab57fe7 elementor-widget elementor-widget-text-editor\" data-id=\"ab57fe7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>Kaj po\u010dne vlada \u2013 in kaj bi morali storiti tudi vi<\/h2><div><h3>200 milijonov evrov in nov digitalni organ<\/h3><p>Konec aprila je premier S\u00e9bastien Lecornu predstavil svoj na\u010drt: 200 milijonov evrov za okrepitev <b>kibernetska varnost <\/b>dr\u017eave, zdru\u017eitev medresorskega direktorata za digitalne zadeve in direktorata za javno preobrazbo, da bi ustvarili digitalni organ, povezan s kabinetom predsednika vlade. Po tem je<b>ANSSI<\/b> je objavila nove smernice za ministrstva: vsako mora imenovati svetovalca <b>kibernetska varnost<\/b>To ni nepomembno. Ko se dr\u017eava reorganizira na tej ravni, to pomeni, da ima za ogenj v hi\u0161i. Vendar pa v verigi vladni oddelki veliko oddajo zunanjim izvajalcem \u2013 in vsak ponudnik storitev je potencialna vstopna to\u010dka.<\/p><h3>Ve\u010dfaktorska avtentikacija: ukrep, ki bi lahko prepre\u010dil \u0161tevilne tragedije<\/h3><p>Tam <b>CNIL <\/b>poudarja preprosto sporo\u010dilo: ve\u010dini nedavnih ve\u010djih napadov bi se lahko izognili z <b>ve\u010dfaktorska avtentikacija<\/b> pravilno name\u0161\u010den. <b>MFA<\/b>Prav ta dvojni dejavnik naredi velik del tehnik neu\u010dinkovitih. <b>polnjenje poverilnic<\/b> in <b>la\u017eno predstavljanje<\/b>Organ je svoje priporo\u010dilo objavil \u017ee marca 2025, kar je organizacijam omogo\u010dilo \u010das za prilagoditev, zdaj pa napoveduje ciljno usmerjene nadzore. Leta 2026 se bo 50 % izvr\u0161ilnih ukrepov osredoto\u010dilo na <b>kibernetska varnost<\/b>, v primerjavi s \u010detrtino do tretjino leta 2025. Za baze, v katerih je ve\u010d kot milijon ljudi, bodo preverjanja prednostna naloga.<\/p><h3>Nekaj konkretnih projektov, ki se bodo za\u010deli ta teden<\/h3><p>Brez preobremenitve ekip obstaja nekaj ukrepov, ki jih je mogo\u010de hitro izvesti in ki v primeru incidenta resni\u010dno spremenijo stvari. To priporo\u010dam svojim strankam na vodilnih polo\u017eajih, ko me vpra\u0161ajo, kje za\u010deti.<\/p><ul><li>Aktivirajte <b>MFA <\/b>na vseh privilegiranih ra\u010dunih in na dostopu do orodij, ki vsebujejo <b>osebni podatki<\/b>.<\/li><li>Posodobite seznam podizvajalcev in preverite, ali ima vsak <b>DPA <\/b>podpisani in identificirati tiste, ki izvajajo <b>prenosi podatkov<\/b> zunaj EU.<\/li><li>Preizkusite svoj postopek <b>obvestilo o kr\u0161itvi<\/b> Kdo koga obvesti? Ali lahko sledite verigi dogodkov nazaj do ... <b>CNIL <\/b>v zakonskem roku <b>72 ur<\/b> ?<\/li><li>Dokumentiranje <b>AIPD<\/b> (<b>analiza vpliva<\/b>) za va\u0161e visoko tvegane tretmaje \u2013 to je druga to\u010dka, ki jo <b>CNIL <\/b>sistemati\u010dni pregledi.<\/li><li>\u0160e enkrat na hitro poglejte svoje <b>register dejavnosti obdelave<\/b> : redko je tako posodobljeno, kot si kdo morda misli.<\/li><\/ul><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-391fcbf ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"391fcbf\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9991cf ot-flex-column-vertical\" data-id=\"d9991cf\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-67924a8 elementor-widget elementor-widget-text-editor\" data-id=\"67924a8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<h2>In kaj se zgodi po pu\u0161\u010danju informacij? Upravljanje incidentov, kjer je vse odvisno.<\/h2><div><h3>Prvih 72 ur odlo\u010da o preostalem<\/h3><p>Ko vas ponudnik storitev opozori, imate <b>72 ur<\/b> obvestiti <b>CNIL <\/b>\u010de <b>uhajanje podatkov<\/b> predstavlja tveganje za ljudi. Ne tri tedne. Ni dovolj \u010dasa za sklic usmerjevalnega odbora. Postopek mora biti pripravljen, napisan, preizku\u0161en in pripravljen za aktivacijo v nedeljo zve\u010der. Na\u0161a stran, posve\u010dena <a href=\"https:\/\/viqtor.eu\/sl\/izjava-o-krsitvi-podatkov\/\">izjava o kr\u0161itvi podatkov<\/a> podrobno opisuje korake, kako se izogniti temu, da bi to storili v obratni smeri.<\/p><h3>Obve\u0161\u010danje vpletenih, trenutek resnice<\/h3><p>\u010ce kr\u0161itev predstavlja veliko tveganje za pravice in svobo\u0161\u010dine posameznikov, GDPR zahteva tudi, da je vsak posameznik neposredno obve\u0161\u010den. Pogosto je na tej to\u010dki krizno komuniciranje prednost pred pravnimi ukrepi. \u010ce je slabo upravljano, se zaupanje poru\u0161i \u2013 Marie-Laure Denis v zvezi z uhajanjem vladnih informacij celo govori o &quot;eroziji zaupanja med dr\u017eavo in njenimi dr\u017eavljani&quot;. Za zasebno podjetje to pomeni, da stranka odide, odvetnik pa pride.<\/p><h3>Sankcija in kaj pove o zrelosti organizacije<\/h3><p>Tam <b>CNIL <\/b>Ne kaznuje samega dejanja bega, temve\u010d kaznuje pomanjkljivosti, ki so ga omogo\u010dile ali poslab\u0161ale. Odsotnost<b>ve\u010dfaktorska avtentikacija<\/b>nepopoln register, generi\u010dne pogodbe o podizvajanju, pozna obve\u0161\u010danja, <b>odgovornost <\/b>neobstoje\u010de. Tu se gradi obramba \u2013 ali obsodba. Da bi bila celotna struktura zanesljiva, na\u0161a <a href=\"https:\/\/viqtor.eu\/sl\/vodnik-za-revizijo-skladnosti-z-gdpr\/\">Popoln vodnik za revizije skladnosti z GDPR<\/a> opisuje metodologijo, ki jo uporabljajo na\u0161i svetovalci.<\/p><\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1c2f757 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1c2f757\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-02dad30 ot-flex-column-vertical\" data-id=\"02dad30\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b25d845 elementor-widget elementor-widget-heading\" data-id=\"b25d845\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Pogosta vpra\u0161anja <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1131cac elementor-widget elementor-widget-toggle\" data-id=\"1131cac\" data-element_type=\"widget\" data-widget_type=\"toggle.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-toggle\">\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1801\" class=\"elementor-tab-title\" data-tab=\"1\" role=\"button\" aria-controls=\"elementor-tab-content-1801\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Moj ponudnik storitev je utrpel kr\u0161itev varnosti podatkov. Ali sem odgovoren?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1801\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"1\" role=\"region\" aria-labelledby=\"elementor-tab-title-1801\"><p>V kolikor <b>upravljavec podatkov<\/b>Da, \u0161e vedno ste pravno odgovorni za obdelavo podatkov, tudi \u010de uhajanje izvira od va\u0161ega podizvajalca. Analizirati morate tveganje in o tem obvestiti <b>CNIL<\/b> \u010de je potrebno v <b>72 ur<\/b>in po potrebi obvestite zadevne osebe. Va\u0161 <b>pogodba o podizvajanju<\/b> <b>GDPR <\/b>na\u010drtovati morate, kako vas bo ponudnik storitev opozoril in sodeloval.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1802\" class=\"elementor-tab-title\" data-tab=\"2\" role=\"button\" aria-controls=\"elementor-tab-content-1802\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Ali je ve\u010dfaktorska avtentikacija obvezna?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1802\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"2\" role=\"region\" aria-labelledby=\"elementor-tab-title-1802\"><p>V GDPR to ni izrecno navedeno, vendar <b>CNIL <\/b>meni, da je to pri\u010dakovan tehni\u010dni ukrep za kakr\u0161en koli dostop do <b>osebni podatki<\/b> ob\u010dutljivo ali obse\u017eno. Njegovo priporo\u010dilo iz marca 2025 je izrecno, revizije leta 2026 pa bodo namenjene predvsem organizacijam, ki ga niso izvedle. Skratka: ni ve\u010d neobvezno.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1803\" class=\"elementor-tab-title\" data-tab=\"3\" role=\"button\" aria-controls=\"elementor-tab-content-1803\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kak\u0161en je rok za obve\u0161\u010danje CNIL o kr\u0161itvi varnosti podatkov?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1803\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"3\" role=\"region\" aria-labelledby=\"elementor-tab-title-1803\"><p><b>72 ur<\/b> od trenutka prijave incidenta, razen \u010de kr\u0161itev verjetno ne bo predstavljala tveganja za pravice in svobo\u0161\u010dine posameznikov. Po tej to\u010dki je treba pozno obvestilo utemeljiti. Prijava se odda prek spletne storitve <b>CNIL<\/b> in mora opisati naravo kr\u0161itve, kategorije zadevnih podatkov in sprejete ukrepe.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1804\" class=\"elementor-tab-title\" data-tab=\"4\" role=\"button\" aria-controls=\"elementor-tab-content-1804\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kateri so prvi ukrepi, ki jih je treba izvesti za mala in srednje velika podjetja?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1804\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"4\" role=\"region\" aria-labelledby=\"elementor-tab-title-1804\"><p>Kartiranje tretmajev in vzdr\u017eevanje <b>register dejavnosti obdelave<\/b> biti na teko\u010dem, identificirati in pravilno skleniti pogodbe z vsakim podizvajalcem prek <b>DPA<\/b>razporediti <b>MFA<\/b>napi\u0161ite postopek za <b>obvestilo o kr\u0161itvi<\/b>in dolo\u010dite referenta ali <b>Poobla\u0161\u010dena oseba za varstvo podatkov<\/b>Teh pet gradbi\u0161\u010d pokriva bistvene kontrolne to\u010dke. <b>CNIL<\/b>.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-toggle-item\">\n\t\t\t\t\t<h3 id=\"elementor-tab-title-1805\" class=\"elementor-tab-title\" data-tab=\"5\" role=\"button\" aria-controls=\"elementor-tab-content-1805\" aria-expanded=\"false\">\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon elementor-toggle-icon-left\" aria-hidden=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-closed\"><i class=\"fas fa-angle-down\"><\/i><\/span>\n\t\t\t\t\t\t\t\t<span class=\"elementor-toggle-icon-opened\"><i class=\"elementor-toggle-icon-opened fas fa-angle-up\"><\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-toggle-title\" tabindex=\"0\">Kak\u0161en je namen ocene u\u010dinka na varstvo podatkov (DPIA) in kdaj jo je treba izvesti?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t<div id=\"elementor-tab-content-1805\" class=\"elementor-tab-content elementor-clearfix\" data-tab=\"5\" role=\"region\" aria-labelledby=\"elementor-tab-title-1805\"><p>L&#039;<b>AIPD<\/b> (<b>analiza vpliva<\/b>Ocena tveganja je obvezna za dejavnosti obdelave, ki predstavljajo veliko tveganje za pravice in svobo\u0161\u010dine: obse\u017eni nadzor, ob\u010dutljivi podatki, avtomatizirano profiliranje itd. Dokumentira tveganja, ukrepe za njihovo ubla\u017eitev in prikazuje va\u0161 pristop k obvladovanju tveganj.<b>odgovornost<\/b>To je eden prvih dokumentov, ki jih je <b>CNIL <\/b>zahteva v primeru pregleda.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t<script type=\"application\/ld+json\">{\n    \"@context\": \"https:\\\/\\\/schema.org\",\n    \"@type\": \"FAQPage\",\n    \"mainEntity\": [\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Mon prestataire a subi une fuite de donn\\u00e9es. Est-ce que je suis responsable ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>En tant que <b>responsable de traitement<\\\/b>, oui, vous restez juridiquement responsable du traitement, m\\u00eame si la fuite vient de votre sous-traitant. Vous devez analyser le risque, notifier la <b>CNIL<\\\/b> si n\\u00e9cessaire dans les <b>72 heures<\\\/b>, et le cas \\u00e9ch\\u00e9ant informer les personnes concern\\u00e9es. Votre <b>contrat de sous-traitance<\\\/b> <b>RGPD <\\\/b>doit pr\\u00e9voir comment le prestataire vous alerte et coop\\u00e8re.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"L'authentification multifacteur est-elle obligatoire ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Elle n&rsquo;est pas inscrite noir sur blanc dans le RGPD, mais la <b>CNIL <\\\/b>la consid\\u00e8re comme une mesure technique attendue pour tout acc\\u00e8s \\u00e0 des <b>donn\\u00e9es personnelles<\\\/b> sensibles ou \\u00e0 grande \\u00e9chelle. Sa recommandation de mars 2025 est explicite, et les contr\\u00f4les 2026 viseront en priorit\\u00e9 les organismes qui ne l&rsquo;auraient pas d\\u00e9ploy\\u00e9e. En clair : ce n&rsquo;est plus une option.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quel d\\u00e9lai pour notifier une violation de donn\\u00e9es \\u00e0 la CNIL ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p><b>72 heures<\\\/b> \\u00e0 compter de la prise de connaissance de l&rsquo;incident, sauf si la violation n&rsquo;est pas susceptible d&rsquo;engendrer un risque pour les droits et libert\\u00e9s des personnes. Au-del\\u00e0, une notification tardive doit \\u00eatre motiv\\u00e9e. La d\\u00e9claration se fait via le t\\u00e9l\\u00e9service de la <b>CNIL<\\\/b> et doit d\\u00e9crire la nature de la violation, les cat\\u00e9gories de donn\\u00e9es concern\\u00e9es et les mesures prises.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"Quelles sont les premi\\u00e8res actions \\u00e0 mettre en place pour une PME ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>Cartographier les traitements et tenir un <b>registre des activit\\u00e9s de traitement<\\\/b> \\u00e0 jour, identifier et contractualiser correctement chaque sous-traitant via un <b>DPA<\\\/b>, d\\u00e9ployer le <b>MFA<\\\/b>, \\u00e9crire une proc\\u00e9dure de <b>notification de violation<\\\/b>, et d\\u00e9signer un r\\u00e9f\\u00e9rent ou un <b>DPO<\\\/b>. Ces cinq chantiers couvrent l&rsquo;essentiel des points de contr\\u00f4le <b>CNIL<\\\/b>.<\\\/p>\"\n            }\n        },\n        {\n            \"@type\": \"Question\",\n            \"name\": \"\\u00c0 quoi sert une AIPD et quand faut-il en faire une ?\",\n            \"acceptedAnswer\": {\n                \"@type\": \"Answer\",\n                \"text\": \"<p>L&rsquo;<b>AIPD<\\\/b> (<b>analyse d&rsquo;impact<\\\/b>) est obligatoire pour les traitements pr\\u00e9sentant un risque \\u00e9lev\\u00e9 pour les droits et libert\\u00e9s : surveillance \\u00e0 grande \\u00e9chelle, donn\\u00e9es sensibles, profilage automatis\\u00e9, etc. Elle documente les risques, les mesures pour les r\\u00e9duire, et d\\u00e9montre votre d\\u00e9marche d&rsquo;<b>accountability<\\\/b>. C&rsquo;est l&rsquo;un des premiers documents que la <b>CNIL <\\\/b>demande en cas de contr\\u00f4le.<\\\/p>\"\n            }\n        }\n    ]\n}<\/script>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-58cdd38 ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"58cdd38\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-42fa8a7 ot-flex-column-vertical\" data-id=\"42fa8a7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-73cfdbe elementor-widget elementor-widget-text-editor\" data-id=\"73cfdbe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Ali \u017eelite te lekcije spremeniti v konkreten akcijski na\u010drt?<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d84722f elementor-align-center elementor-widget elementor-widget-button\" data-id=\"d84722f\" data-element_type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-lg\" href=\"https:\/\/viqtor.eu\/sl\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-long-arrow-alt-right\"><\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\"> Pogovorimo se o tem s strokovnjakom Viqtorja<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-c3438bb ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"c3438bb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d9aacbe ot-flex-column-vertical\" data-id=\"d9aacbe\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-566c278 elementor-widget elementor-widget-text-editor\" data-id=\"566c278\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>\u010ce \u017eelite izvedeti ve\u010d, poi\u0161\u010dite vse na\u0161e vire na <a href=\"https:\/\/viqtor.eu\/sl\/upravljanje-podatkov\/\">upravljanje podatkov<\/a> in skladnost z GDPR na <a href=\"https:\/\/viqtor.eu\/sl\">Platforma Viqtor<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Po podatkih CNIL se v letu 2025 pri\u010dakuje rekordno \u0161tevilo kr\u0161itev podatkov. Podizvajalci, MFA, 72-urno obve\u0161\u010danje: kaj morate vedeti in storiti zdaj.<\/p>","protected":false},"author":3,"featured_media":14327,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[37],"tags":[],"class_list":["post-14221","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme<\/title>\n<meta name=\"description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/viqtor.eu\/sl\/cnil-opozarja-na-krsitve-podatkov\/\" \/>\n<meta property=\"og:locale\" content=\"sl_SI\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Violations de donn\u00e9es : la CNIL tire la sonnette d&#039;alarme\" \/>\n<meta property=\"og:description\" content=\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu&#039;il faut retenir et faire.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/viqtor.eu\/sl\/cnil-opozarja-na-krsitve-podatkov\/\" \/>\n<meta property=\"og:site_name\" content=\"Viqtor\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-01T09:02:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-02T08:39:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1365\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"hedi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hedi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"author\":{\"name\":\"hedi\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\"},\"headline\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"},\"wordCount\":2198,\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"sl-SI\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"url\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\",\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme\",\"isPartOf\":{\"@id\":\"https:\/\/viqtor.eu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"datePublished\":\"2026-07-01T09:02:11+00:00\",\"dateModified\":\"2026-07-02T08:39:33+00:00\",\"description\":\"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.\",\"breadcrumb\":{\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\"},\"inLanguage\":\"sl-SI\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sl-SI\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage\",\"url\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"contentUrl\":\"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg\",\"width\":2560,\"height\":1365},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/viqtor.eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/viqtor.eu\/#website\",\"url\":\"https:\/\/viqtor.eu\/\",\"name\":\"Viqtor\",\"description\":\"Faites du RGPD une opportunit\u00e9 pour votre entreprise.\",\"publisher\":{\"@id\":\"https:\/\/viqtor.eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/viqtor.eu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sl-SI\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/viqtor.eu\/#organization\",\"name\":\"viqtor.eu\",\"url\":\"https:\/\/viqtor.eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sl-SI\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"viqtor.eu\"},\"image\":{\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc\",\"name\":\"hedi\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sl-SI\",\"@id\":\"https:\/\/viqtor.eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g\",\"caption\":\"hedi\"},\"url\":\"https:\/\/viqtor.eu\/sl\/author\/hedi\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/viqtor.eu\/sl\/cnil-opozarja-na-krsitve-podatkov\/","og_locale":"sl_SI","og_type":"article","og_title":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","og_description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","og_url":"https:\/\/viqtor.eu\/sl\/cnil-opozarja-na-krsitve-podatkov\/","og_site_name":"Viqtor","article_published_time":"2026-07-01T09:02:11+00:00","article_modified_time":"2026-07-02T08:39:33+00:00","og_image":[{"width":2560,"height":1365,"url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/04\/widget-viqtor.png","type":"image\/jpeg"}],"author":"hedi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hedi","Est. reading time":"10 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#article","isPartOf":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"author":{"name":"hedi","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc"},"headline":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","mainEntityOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"},"wordCount":2198,"publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","articleSection":["Blog"],"inLanguage":"sl-SI"},{"@type":"WebPage","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","url":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/","name":"Violations de donn\u00e9es : la CNIL tire la sonnette d'alarme","isPartOf":{"@id":"https:\/\/viqtor.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"image":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage"},"thumbnailUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","datePublished":"2026-07-01T09:02:11+00:00","dateModified":"2026-07-02T08:39:33+00:00","description":"Record de violations de donn\u00e9es en 2025 selon la CNIL. Sous-traitants, MFA, notification sous 72h : ce qu'il faut retenir et faire.","breadcrumb":{"@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb"},"inLanguage":"sl-SI","potentialAction":[{"@type":"ReadAction","target":["https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/"]}]},{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#primaryimage","url":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","contentUrl":"https:\/\/viqtor.eu\/wp-content\/uploads\/2026\/07\/Violation-des-donnees-scaled.jpg","width":2560,"height":1365},{"@type":"BreadcrumbList","@id":"https:\/\/viqtor.eu\/violations-de-donnees-cnil-tire-sonnette-alarme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/viqtor.eu\/"},{"@type":"ListItem","position":2,"name":"Violations de donn\u00e9es : la CNIL tire la sonnette d&rsquo;alarme, et nous avec\u200b"}]},{"@type":"WebSite","@id":"https:\/\/viqtor.eu\/#website","url":"https:\/\/viqtor.eu\/","name":"Viqtor","description":"Faites du RGPD une opportunit\u00e9 pour votre entreprise.","publisher":{"@id":"https:\/\/viqtor.eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/viqtor.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sl-SI"},{"@type":"Organization","@id":"https:\/\/viqtor.eu\/#organization","name":"viqtor.eu","url":"https:\/\/viqtor.eu\/","logo":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"viqtor.eu"},"image":{"@id":"https:\/\/viqtor.eu\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/0afd87c59ae4bd97a30bbbf61efe2bdc","name":"hedi","image":{"@type":"ImageObject","inLanguage":"sl-SI","@id":"https:\/\/viqtor.eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b453727309969140a2f5c858b970fe7a21afb4251c92a7bb2c6582a5ce6ebba8?s=96&d=mm&r=g","caption":"hedi"},"url":"https:\/\/viqtor.eu\/sl\/author\/hedi\/"}]}},"_links":{"self":[{"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/posts\/14221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/comments?post=14221"}],"version-history":[{"count":26,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/posts\/14221\/revisions"}],"predecessor-version":[{"id":14331,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/posts\/14221\/revisions\/14331"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/media\/14327"}],"wp:attachment":[{"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/media?parent=14221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/categories?post=14221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/viqtor.eu\/sl\/wp-json\/wp\/v2\/tags?post=14221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}