Result of the resolution: Imposition of penalty
The Town Council did not formalize a contract of person in charge of the treatment with the adjudicator company of the contract of services that the access to municipal data bases of test implied. He did not establish the necessary safety measures either, nor he kept vigil enough so that the company adopted them adjudicator of the contract, neither did it elaborate correctly nor did it keep the document of security updated. For his part, the adjudicator company exported data without the previous authorization of the responsible for the file, and did not establish the necessary mechanisms of identification and authentication to avoid undue accesses through a web of public access. Applied articles: Art. 10.2 of the Decree 278/1993