{"id":61347,"date":"2023-12-08T20:25:30","date_gmt":"2023-12-08T11:25:30","guid":{"rendered":"https:\/\/monolith.law\/cs\/?p=61347"},"modified":"2024-03-26T16:44:09","modified_gmt":"2024-03-26T07:44:09","slug":"risk-of-company-personal-information-leak-compensation-for-damages","status":"publish","type":"post","link":"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages","title":{"rendered":"Riziko \u00faniku osobn\u00edch \u00fadaj\u016f v podnic\u00edch a n\u00e1hrada \u0161kody"},"content":{"rendered":"\n<p>Rizika obklopuj\u00edc\u00ed podnikov\u00e9 \u0159\u00edzen\u00ed zahrnuj\u00ed krize v \u0159\u00edzen\u00ed, nehody zp\u016fsoben\u00e9 poru\u0161en\u00edm povinnosti podniku db\u00e1t na bezpe\u010dnost, ale v posledn\u00edch letech se st\u00e1v\u00e1 velk\u00fdm probl\u00e9mem tak\u00e9 riziko \u00faniku osobn\u00edch \u00fadaj\u016f a s t\u00edm spojen\u00e9 n\u00e1hrady \u0161kody.<\/p>\n\n\n\n<p>Tokyo Shoko Research ozn\u00e1mil, \u017ee v roce 2019 (Gregorian calendar year 2019) 66 spole\u010dnost\u00ed uveden\u00fdch na burze a jejich dce\u0159in\u00fdch spole\u010dnost\u00ed ozn\u00e1milo \u00faniky a ztr\u00e1ty osobn\u00edch \u00fadaj\u016f, po\u010det incident\u016f dos\u00e1hl 86 a unikl\u00e9 osobn\u00ed \u00fadaje dos\u00e1hly 9 031 734 osob. K tomu, pokud p\u0159id\u00e1me nek\u00f3tovan\u00e9 spole\u010dnosti, zahrani\u010dn\u00ed spole\u010dnosti, vl\u00e1dn\u00ed \u00fa\u0159ady, m\u00edstn\u00ed samospr\u00e1vy, \u0161koly atd., m\u016f\u017ee se po\u010det dramaticky zv\u00fd\u0161it.<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/corporate\/trends-in-personal-information-leakage-and-loss-accidents-in-2019\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/corporate\/trends-in-personal-information-leakage-and-loss-accidents-in-2019[ja]<\/a><\/p>\n\n\n\n<p>Mezi \u00faniky a ztr\u00e1tami osobn\u00edch \u00fadaj\u016f je st\u00e1le nejv\u011bt\u0161\u00ed incident, kter\u00fd byl odhalen v \u010dervenci 2014 (Gregorian calendar year 2014), kdy zam\u011bstnanec spole\u010dnosti, kter\u00e9 bylo sv\u011b\u0159eno zpracov\u00e1n\u00ed \u00fadaj\u016f, neopr\u00e1vn\u011bn\u011b z\u00edskal informace o z\u00e1kazn\u00edc\u00edch spole\u010dnosti Benesse Holdings (Japonsk\u00e1 Benesse Corporation) a uniklo tak 35,04 milionu osobn\u00edch \u00fadaj\u016f. V roce 2019 (Gregorian calendar year 2019) se v n\u011bkolika soudn\u00edch p\u0159\u00edpadech t\u00fdkaj\u00edc\u00edch se tohoto incidentu objevily nov\u00e9 v\u00fdvoje.<br>\nZat\u00edmco se sna\u017e\u00edme vy\u0159e\u0161it probl\u00e9m Benesse, zamysleme se nad rizikem \u00faniku osobn\u00edch \u00fadaj\u016f a n\u00e1hrady \u0161kody pro podniky.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_53 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Co_je_incident_uniku_osobnich_udaju_spolecnosti_Benesse\" title=\"Co je incident \u00faniku osobn\u00edch \u00fadaj\u016f spole\u010dnosti Benesse\">Co je incident \u00faniku osobn\u00edch \u00fadaj\u016f spole\u010dnosti Benesse<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Rozhodnuti_Nejvyssiho_soudu_a_odvolaci_rizeni_po_vraceni_pripadu\" title=\"Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu a odvolac\u00ed \u0159\u00edzen\u00ed po vr\u00e1cen\u00ed p\u0159\u00edpadu\">Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu a odvolac\u00ed \u0159\u00edzen\u00ed po vr\u00e1cen\u00ed p\u0159\u00edpadu<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Rozhodnuti_Nejvyssiho_soudu\" title=\"Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu\">Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Rozhodnuti_odvolaciho_soudu_o_vraceni_pripadu\" title=\"Rozhodnut\u00ed odvolac\u00edho soudu o vr\u00e1cen\u00ed p\u0159\u00edpadu\">Rozhodnut\u00ed odvolac\u00edho soudu o vr\u00e1cen\u00ed p\u0159\u00edpadu<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Prvni_soudni_pripad_uznavajici_odpovednost_spolecnosti_Benesse\" title=\"Prvn\u00ed soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse\">Prvn\u00ed soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse<\/a><ul class='ez-toc-list-level-3'><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Rozhodnuti_prvni_instance\" title=\"Rozhodnut\u00ed prvn\u00ed instance\">Rozhodnut\u00ed prvn\u00ed instance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Rozhodnuti_odvolaciho_soudu\" title=\"Rozhodnut\u00ed odvolac\u00edho soudu\">Rozhodnut\u00ed odvolac\u00edho soudu<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Druhy_soudni_pripad_uznavajici_odpovednost_spolecnosti_Benesse\" title=\"Druh\u00fd soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse\">Druh\u00fd soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/monolith.law\/cs\/general-corporate\/risk-of-company-personal-information-leak-compensation-for-damages\/#Shrnuti\" title=\"Shrnut\u00ed\">Shrnut\u00ed<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Co_je_incident_uniku_osobnich_udaju_spolecnosti_Benesse\"><\/span>Co je incident \u00faniku osobn\u00edch \u00fadaj\u016f spole\u010dnosti Benesse<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2020\/02\/shutterstock_413297080-1024x683.jpg\" alt=\"Riziko \u00faniku osobn\u00edch \u00fadaj\u016f a n\u00e1hrady \u0161kody v podnic\u00edch\" class=\"wp-image-7490\" \/><figcaption class=\"wp-element-caption\"> Incident \u00faniku osobn\u00edch \u00fadaj\u016f spole\u010dnosti Benesse, kter\u00fd se stal kolem \u010dervna 2014, je st\u00e1le v na\u0161\u00ed pam\u011bti. <\/figcaption><\/figure>\n\n\n\n<p>Kolem \u010dervna 2014 za\u010dali z\u00e1kazn\u00edci spole\u010dnosti Benesse dost\u00e1vat p\u0159\u00edm\u00e9 e-maily od spole\u010dnosti &#8220;Just System&#8221;, kter\u00e1 poskytuje vzd\u011bl\u00e1v\u00e1n\u00ed na d\u00e1lku. To vyvolalo n\u00e1r\u016fst dotaz\u016f, zda tyto e-maily nevyu\u017e\u00edvaj\u00ed osobn\u00ed \u00fadaje, kter\u00e9 byly zaregistrov\u00e1ny pouze u spole\u010dnosti Benesse, a zda nebyly tyto \u00fadaje n\u011bjak unikly.<\/p>\n\n\n\n<p>27. \u010dervna spole\u010dnost Benesse zah\u00e1jila intern\u00ed vy\u0161et\u0159ov\u00e1n\u00ed a 30. \u010dervna o tom informovala policii a Ministerstvo hospod\u00e1\u0159stv\u00ed, obchodu a pr\u016fmyslu. Dne 9. \u010dervence na tiskov\u00e9 konferenci ozn\u00e1mila, \u017ee do\u0161lo k \u00faniku osobn\u00edch \u00fadaj\u016f, jako jsou jm\u00e9na, adresy, telefonn\u00ed \u010d\u00edsla, pohlav\u00ed a data narozen\u00ed d\u011bt\u00ed a jejich rodi\u010d\u016f, kte\u0159\u00ed jsou z\u00e1kazn\u00edky jej\u00edch vzd\u011bl\u00e1vac\u00edch program\u016f, jako je &#8220;Shinken Seminar&#8221;.<\/p>\n\n\n\n<p>17. \u010dervence byl zat\u010den 39let\u00fd syst\u00e9mov\u00fd in\u017een\u00fdr, kter\u00fd m\u011bl p\u0159\u00edstup k z\u00e1kaznick\u00fdm \u00fadaj\u016fm a byl odpov\u011bdn\u00fd za spr\u00e1vu datab\u00e1zov\u00e9ho syst\u00e9mu spole\u010dnosti Synform, kter\u00e1 byla subdodavatelem spole\u010dnosti Benesse pro spr\u00e1vu z\u00e1kaznick\u00fdch informac\u00ed. Bylo zji\u0161t\u011bno, \u017ee tento in\u017een\u00fdr odnesl osobn\u00ed \u00fadaje a prodal je firm\u011b zab\u00fdvaj\u00edc\u00ed se prodejem adres\u00e1\u0159\u016f.<\/p>\n\n\n\n<p>V z\u00e1\u0159\u00ed spole\u010dnost Benesse na tiskov\u00e9 konferenci ozn\u00e1mila, \u017ee po\u010det p\u0159\u00edpad\u016f \u00faniku z\u00e1kaznick\u00fdch informac\u00ed dos\u00e1hl 35,04 milionu. Spole\u010dnost uvedla, \u017ee ji\u017e p\u0159ipravila 20 miliard jen\u016f (cca 4,6 miliard K\u010d) jako kompenzaci pro ob\u011bti \u00faniku osobn\u00edch \u00fadaj\u016f. Spole\u010dnost tak\u00e9 ozn\u00e1mila, \u017ee znovu odeslala omluvn\u00fd dopis potvrzen\u00fdm z\u00e1kazn\u00edk\u016fm a podle jejich volby jim poskytne d\u00e1rkov\u00e9 pouk\u00e1zky v hodnot\u011b 500 jen\u016f (cca 115 K\u010d) (elektronick\u00fd pen\u011b\u017en\u00ed d\u00e1rek nebo kni\u017en\u00ed pouk\u00e1zky platn\u00e9 po cel\u00e9 zemi) nebo daruje 500 jen\u016f za ka\u017ed\u00fd p\u0159\u00edpad \u00faniku na nadaci Benesse Children&#8217;s Foundation, kter\u00e1 byla zalo\u017eena s c\u00edlem podporovat d\u011bti posti\u017een\u00e9 t\u00edmto \u00fanikem.<\/p>\n\n\n\n<p>Na toto ozn\u00e1men\u00ed reagovala skupina ob\u011bt\u00ed t\u00edm, \u017ee zformovala n\u011bkolik pr\u00e1vnick\u00fdch t\u00fdm\u016f a podala hromadnou \u017ealobu. V roce 2019 bylo v t\u00e9to v\u011bci zaznamen\u00e1no n\u011bkolik v\u00fdvoj\u016f. Co se t\u00fd\u010de trestn\u00edho \u0159\u00edzen\u00ed, syst\u00e9mov\u00fd in\u017een\u00fdr, kter\u00fd byl obvin\u011bn\u00fd z odcizen\u00ed osobn\u00edch \u00fadaj\u016f, byl obvin\u011bn z poru\u0161en\u00ed z\u00e1kona o prevenci nespravedliv\u00e9 sout\u011b\u017ee (kop\u00edrov\u00e1n\u00ed a zve\u0159ej\u0148ov\u00e1n\u00ed obchodn\u00edch tajemstv\u00ed). Dne 21. b\u0159ezna 2017 byl vynesen kone\u010dn\u00fd rozsudek Tokijsk\u00e9ho vrchn\u00edho soudu, kter\u00fd ho odsoudil k trestu odn\u011bt\u00ed svobody na 2 a p\u016fl roku a pokut\u011b 3 miliony jen\u016f (cca 690 tis\u00edc K\u010d) bez mo\u017enosti odkladu.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Rozhodnuti_Nejvyssiho_soudu_a_odvolaci_rizeni_po_vraceni_pripadu\"><\/span>Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu a odvolac\u00ed \u0159\u00edzen\u00ed po vr\u00e1cen\u00ed p\u0159\u00edpadu<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2020\/02\/shutterstock_1102327574-1024x683.jpg\" alt=\"Riziko \u00faniku osobn\u00edch \u00fadaj\u016f a n\u00e1hrady \u0161kody v podnic\u00edch\" class=\"wp-image-7497\" \/><figcaption class=\"wp-element-caption\">P\u0159\u00edklad, kdy bylo na\u0159\u00edzeno zaplatit od\u0161kodn\u00e9, zohled\u0148uje skute\u010dnosti, jako je zve\u0159ejn\u011bn\u00ed adresy, jm\u00e9na a telefonn\u00edho \u010d\u00edsla \u017ealobce na webov\u00fdch str\u00e1nk\u00e1ch.<\/figcaption><\/figure>\n\n\n\n<p>V p\u0159\u00edpad\u011b, kdy mu\u017e a d\u00edt\u011b trp\u011bli du\u0161evn\u00edm stresem kv\u016fli \u00faniku jm\u00e9na, adresy, telefonn\u00edho \u010d\u00edsla atd., po\u017eadoval mu\u017e od spole\u010dnosti Benesse n\u00e1hradu \u0161kody ve v\u00fd\u0161i 100 000 jen\u016f. Nejvy\u0161\u0161\u00ed soud zru\u0161il rozsudek p\u016fvodn\u00edho soudu, tedy \u00d3sack\u00e9ho vrchn\u00edho soudu, a vr\u00e1til p\u0159\u00edpad k dal\u0161\u00edmu projedn\u00e1n\u00ed, proto\u017ee nebylo provedeno dostate\u010dn\u00e9 zkoum\u00e1n\u00ed.<\/p>\n\n\n\n<p>P\u0159ed vr\u00e1cen\u00edm p\u0159\u00edpadu prvn\u00ed instance, tedy Okresn\u00ed soud v Himeji, dne 2. prosince 2015 uznal jako nesporn\u00fd fakt, \u017ee jm\u00e9no mu\u017ee, kter\u00e9 spravovala spole\u010dnost Benesse, uniklo. Soud v\u0161ak zam\u00edtl n\u00e1rok mu\u017ee, proto\u017ee nebyly dolo\u017eeny konkr\u00e9tn\u00ed okolnosti, kter\u00e9 by dok\u00e1zaly, \u017ee k tomu do\u0161lo vinou spole\u010dnosti Benesse.<\/p>\n\n\n\n<p>Na to mu\u017e podal odvol\u00e1n\u00ed a odvolac\u00ed soud (\u00d3sack\u00fd vrchn\u00ed soud, rozsudek ze dne 29. \u010dervna 2016) uznal, \u017ee uniklo jm\u00e9no, pohlav\u00ed, datum narozen\u00ed, po\u0161tovn\u00ed sm\u011brovac\u00ed \u010d\u00edslo, adresa, telefonn\u00ed \u010d\u00edslo a jm\u00e9no z\u00e1konn\u00e9ho z\u00e1stupce (jm\u00e9no \u017ealobce) d\u00edt\u011bte, kter\u00e9 spravoval \u017ealovan\u00fd. Soud d\u00e1le uznal, \u017ee na z\u00e1klad\u011b toho lze konstatovat, \u017ee unikly osobn\u00ed \u00fadaje \u017ealobce, v\u010detn\u011b jeho jm\u00e9na, po\u0161tovn\u00edho sm\u011brovac\u00edho \u010d\u00edsla, adresy, telefonn\u00edho \u010d\u00edsla a jm\u00e9na, pohlav\u00ed a data narozen\u00ed jeho rodinn\u00fdch p\u0159\u00edslu\u0161n\u00edk\u016f. Soud uznal, \u017ee \u00fanik t\u011bchto osobn\u00edch \u00fadaj\u016f \u017ealobce m\u016f\u017ee v b\u011b\u017en\u00e9m vn\u00edm\u00e1n\u00ed \u010dlov\u011bka vyvolat nejen nep\u0159\u00edjemn\u00e9 pocity, ale tak\u00e9 obavy. Nicm\u00e9n\u011b, pokud se c\u00edt\u00edte jen nep\u0159\u00edjemn\u011b, nem\u016f\u017eete okam\u017eit\u011b po\u017eadovat n\u00e1hradu \u0161kody jako naru\u0161en\u00fd z\u00e1jem. Odvol\u00e1n\u00ed bylo zam\u00edtnuto, proto\u017ee nebyly dolo\u017eeny \u017e\u00e1dn\u00e9 d\u016fkazy o \u0161kod\u011b p\u0159esahuj\u00edc\u00ed v\u00fd\u0161e uveden\u00e9 nep\u0159\u00edjemn\u00e9 pocity atd.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Rozhodnuti_Nejvyssiho_soudu\"><\/span>Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Odvolatel podal proti tomu dovol\u00e1n\u00ed, kter\u00e9 Nejvy\u0161\u0161\u00ed soud p\u0159ijal. Nejvy\u0161\u0161\u00ed soud konstatoval, \u017ee i kdy\u017e bylo mo\u017en\u00e9 \u0159\u00edci, \u017ee odvolatel byl naru\u0161en v jeho soukrom\u00ed v d\u016fsledku \u00faniku informac\u00ed, Osaka High Court (Japonsk\u00fd Vrchn\u00ed soud v \u00d3sace) zam\u00edtl n\u00e1rok odvolatele bez dostate\u010dn\u00e9ho zkoum\u00e1n\u00ed existence a m\u00edry du\u0161evn\u00ed \u0161kody odvolatele zp\u016fsoben\u00e9 poru\u0161en\u00edm soukrom\u00ed, pouze na z\u00e1klad\u011b skute\u010dnosti, \u017ee nebylo prok\u00e1z\u00e1no tvrzen\u00ed o vzniku \u0161kody p\u0159esahuj\u00edc\u00ed nepohodl\u00ed. Nejvy\u0161\u0161\u00ed soud d\u00e1le uvedl, \u017ee takov\u00e9 rozhodnut\u00ed p\u016fvodn\u00edho soudu bylo nez\u00e1konn\u00e9, proto\u017ee do\u0161lo k nespr\u00e1vn\u00e9 interpretaci a aplikaci z\u00e1kon\u016f t\u00fdkaj\u00edc\u00edch se \u0161kod v p\u0159\u00edpad\u011b protipr\u00e1vn\u00edho jedn\u00e1n\u00ed a nedostate\u010dn\u00e9mu zkoum\u00e1n\u00ed v\u00fd\u0161e uveden\u00fdch bod\u016f, a zru\u0161il p\u016fvodn\u00ed rozsudek. Pro dal\u0161\u00ed zkoum\u00e1n\u00ed existence a m\u00edry du\u0161evn\u00ed \u0161kody odvolatele a existence nedbalosti ze strany \u017ealovan\u00e9ho, byla v\u011bc vr\u00e1cena zp\u011bt do Vrchn\u00edho soudu (Rozhodnut\u00ed Nejvy\u0161\u0161\u00edho soudu ze dne 23. \u0159\u00edjna 2017 (2017)).<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/reputation\/privacy-invasion\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/reputation\/privacy-invasion[ja]<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Rozhodnuti_odvolaciho_soudu_o_vraceni_pripadu\"><\/span>Rozhodnut\u00ed odvolac\u00edho soudu o vr\u00e1cen\u00ed p\u0159\u00edpadu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>V p\u0159\u00edpad\u011b vr\u00e1cen\u00ed p\u0159\u00edpadu rozhodl Vrchn\u00ed soud v \u00d3sace (20. listopadu 2019) o tom, \u017ee zam\u011bstnanec v dan\u00e9m p\u0159\u00edpadu neopr\u00e1vn\u011bn\u011b z\u00edskal osobn\u00ed \u00fadaje pomoc\u00ed metody p\u0159enosu dat pomoc\u00ed MTP komunikace t\u00edm, \u017ee p\u0159ipojil smartphone kompatibiln\u00ed s MTP k pracovn\u00edmu po\u010d\u00edta\u010di pomoc\u00ed USB kabelu p\u0159es USB port a prodal je seznamovac\u00ed agentu\u0159e. Spole\u010dnost Shinform m\u011bla povinnost db\u00e1t na to, aby se smartphone kompatibiln\u00ed s MTP nedostal do v\u00fd\u0161e uveden\u00e9 kancel\u00e1\u0159e a aby se nedostal k osobn\u00edm \u00fadaj\u016fm v dan\u00e9m p\u0159\u00edpadu, ale tuto povinnost zanedbala. Benesse poru\u0161ila svou povinnost \u0159\u00e1dn\u011b dohl\u00ed\u017eet na spole\u010dnost Shinform, kter\u00e1 byla pov\u011b\u0159ena spr\u00e1vou dan\u00fdch osobn\u00edch \u00fadaj\u016f, co\u017e vedlo k \u00faniku \u00fadaj\u016f zam\u011bstnancem. Proto bylo rozhodnuto, \u017ee ob\u011b spole\u010dnosti nesou spole\u010dnou odpov\u011bdnost za protipr\u00e1vn\u00ed jedn\u00e1n\u00ed (\u010dl\u00e1nek 719 odstavec 1 ob\u010dansk\u00e9ho z\u00e1kon\u00edku) za \u0161kodu zp\u016fsobenou t\u00edmto jedn\u00e1n\u00edm.<\/p>\n\n\n\n<p>Pot\u00e9, co bylo uzn\u00e1no, \u017ee do\u0161lo k poru\u0161en\u00ed soukrom\u00ed, bylo rozhodnuto, \u017ee bylo poru\u0161eno ustanoven\u00ed \u010dl\u00e1nku 22 z\u00e1kona o ochran\u011b osobn\u00edch \u00fadaj\u016f (japonsk\u00fd z\u00e1kon o ochran\u011b osobn\u00edch \u00fadaj\u016f), kter\u00e9 stanov\u00ed, \u017ee &#8220;pokud subjekt zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f sv\u011b\u0159\u00ed celou nebo \u010d\u00e1st zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f, mus\u00ed prov\u00e9st nezbytn\u00fd a vhodn\u00fd dohled nad subjektem, kter\u00e9mu bylo sv\u011b\u0159eno zpracov\u00e1n\u00ed, aby bylo zaji\u0161t\u011bno bezpe\u010dn\u00e9 zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f&#8221;. S ohledem na skute\u010dnost, \u017ee adresa, jm\u00e9no a telefonn\u00ed \u010d\u00edslo odvolatele byly zve\u0159ejn\u011bny na webov\u00fdch str\u00e1nk\u00e1ch atd., bylo na\u0159\u00edzeno zaplatit 1000 jen\u016f jako n\u00e1hradu \u0161kody.<\/p>\n\n\n\n<p>Tento soud je t\u0159et\u00edm p\u0159\u00edpadem, kdy byla uzn\u00e1na odpov\u011bdnost Benesse za n\u00e1hradu \u0161kody. Na za\u010d\u00e1tku tohoto \u010dl\u00e1nku jsme napsali, \u017ee &#8220;v roce 2019 do\u0161lo k n\u011bkolika nov\u00fdm v\u00fdvoj\u016fm v soudn\u00edch p\u0159\u00edpadech t\u00fdkaj\u00edc\u00edch se t\u00e9to ud\u00e1losti&#8221;, ale v\u0161echna t\u0159i rozhodnut\u00ed uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost Benesse za n\u00e1hradu \u0161kody byla vyd\u00e1na v roce 2019.<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/corporate\/act-on-the-protection-of-personal-information-privacy-issues\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/corporate\/act-on-the-protection-of-personal-information-privacy-issues[ja]<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Prvni_soudni_pripad_uznavajici_odpovednost_spolecnosti_Benesse\"><\/span>Prvn\u00ed soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Rozhodnuti_prvni_instance\"><\/span>Rozhodnut\u00ed prvn\u00ed instance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/monolith.law\/wp-content\/uploads\/2020\/02\/shutterstock_1054827035-1024x697.jpg\" alt=\"Riziko \u00faniku osobn\u00edch \u00fadaj\u016f a n\u00e1hrady \u0161kody v podnic\u00edch\" class=\"wp-image-7498\" \/><figcaption class=\"wp-element-caption\">P\u0159edstavujeme p\u0159\u00edpad, kdy byla uzn\u00e1na odpov\u011bdnost spole\u010dnosti Benesse.<\/figcaption><\/figure>\n\n\n\n<p>Spole\u010dnost Benesse byla poprv\u00e9 uzn\u00e1na za odpov\u011bdnou v odvolac\u00edm soudn\u00edm rozhodnut\u00ed, kdy mu\u017e po\u017eadoval od\u0161kodn\u011bn\u00ed za du\u0161evn\u00ed utrpen\u00ed zp\u016fsoben\u00e9 t\u00edm, \u017ee spole\u010dnost Benesse umo\u017enila \u00fanik osobn\u00edch \u00fadaj\u016f o n\u011bm, jeho man\u017eelce a synovi.<\/p>\n\n\n\n<p>Prvn\u00ed instance (Yokohama District Court, 16. \u00fanora 2017) uznala, \u017ee spole\u010dnost Benesse poru\u0161ila svou povinnost k opatrnosti, ale zam\u00edtla \u017ealobu proti spole\u010dnosti Benesse, proto\u017ee nebyly dolo\u017eeny konkr\u00e9tn\u00ed skute\u010dnosti, kter\u00e9 by dokazovaly, \u017ee spole\u010dnost poru\u0161ila svou povinnost sledovat zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f. Mu\u017e a dal\u0161\u00ed \u017ealobci se proto odvolali.<\/p>\n\n\n\n<p>V prvn\u00ed instanci bylo uvedeno, \u017ee i kdy\u017e spole\u010dnost Benesse obdr\u017eela doporu\u010den\u00ed na z\u00e1klad\u011b \u010dl\u00e1nku 34 odst. 1 Japonsk\u00e9ho z\u00e1kona o ochran\u011b osobn\u00edch \u00fadaj\u016f (Japanese Personal Information Protection Act) od ministra hospod\u00e1\u0159stv\u00ed, obchodu a pr\u016fmyslu za poru\u0161en\u00ed povinnost\u00ed stanoven\u00fdch v \u010dl\u00e1nc\u00edch 20 a 22 tohoto z\u00e1kona a za zp\u016fsoben\u00ed \u00faniku informac\u00ed v tomto p\u0159\u00edpad\u011b, doporu\u010den\u00ed podle tohoto ustanoven\u00ed se vyd\u00e1v\u00e1, kdy\u017e je uzn\u00e1no jako nezbytn\u00e9 pro ochranu pr\u00e1v a z\u00e1jm\u016f jednotlivc\u016f, a nevy\u017eaduje existenci povinnosti p\u0159edv\u00eddat v\u00fdsledky nebo povinnosti zabr\u00e1nit v\u00fdsledk\u016fm nebo poru\u0161en\u00ed t\u011bchto povinnost\u00ed v dob\u011b \u00faniku informac\u00ed. Proto bylo uvedeno, \u017ee pouh\u00e9 vyd\u00e1n\u00ed doporu\u010den\u00ed nesta\u010d\u00ed k uzn\u00e1n\u00ed, \u017ee spole\u010dnost Benesse m\u011bla v dob\u011b \u00faniku informac\u00ed nedbalost podle \u010dl\u00e1nku 709 ob\u010dansk\u00e9ho z\u00e1kon\u00edku (Japanese Civil Code).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Rozhodnuti_odvolaciho_soudu\"><\/span>Rozhodnut\u00ed odvolac\u00edho soudu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Na to odvolac\u00ed soud, Tokyo High Court (27. \u010dervna 2019), p\u0159edpokl\u00e1daj\u00edc\u00ed skute\u010dnost, \u017ee se nejednalo o zlo\u010din proveden\u00fd s vyu\u017eit\u00edm vysok\u00e9 \u00farovn\u011b znalost\u00ed nebo speci\u00e1ln\u00edch technik, ale o jednoduch\u00fd zlo\u010din, kter\u00fd byl proveden t\u00edm, \u017ee se napadlo, \u017ee je mo\u017en\u00e9 p\u0159en\u00e9st data t\u00edm, \u017ee se smartphone p\u0159ipojil k pracovn\u00edmu po\u010d\u00edta\u010di pomoc\u00ed komer\u010dn\u00edho USB kabelu pro nab\u00edjen\u00ed, uznal, \u017ee spole\u010dnost Shinform m\u011bla povinnost uplatnit kontrolu nad p\u0159enosem dat na smartphony podporuj\u00edc\u00ed MTP a \u017ee tuto povinnost zanedbala. Uznal tak\u00e9, \u017ee spole\u010dnost Benesse, kter\u00e1 sv\u011b\u0159ila spr\u00e1vu velk\u00e9ho mno\u017estv\u00ed osobn\u00edch \u00fadaj\u016f, m\u011bla v dob\u011b \u00faniku povinnost \u0159\u00e1dn\u011b dohl\u00ed\u017eet na sv\u00e9ho dodavatele v oblasti spr\u00e1vy osobn\u00edch \u00fadaj\u016f a \u017ee tuto povinnost zanedbala. Soud rozhodl, \u017ee tyto nez\u00e1konn\u00e9 \u010diny obou spole\u010dnost\u00ed p\u0159edstavuj\u00ed spole\u010dn\u00fd nez\u00e1konn\u00fd \u010din podle \u010dl\u00e1nku 719 odst. 1 prvn\u00ed \u010d\u00e1sti ob\u010dansk\u00e9ho z\u00e1kon\u00edku (Japanese Civil Code).<\/p>\n\n\n\n<p>Soud d\u00e1le uvedl, \u017ee &#8220;je p\u0159irozen\u00e9, \u017ee odvolatel\u00e9 necht\u011bj\u00ed, aby byly tyto osobn\u00ed informace n\u00e1hodn\u011b zve\u0159ejn\u011bny t\u011bm, kte\u0159\u00ed je necht\u011bj\u00ed, a proto jsou tyto osobn\u00ed informace p\u0159edm\u011btem pr\u00e1vn\u00ed ochrany jako informace t\u00fdkaj\u00edc\u00ed se soukrom\u00ed odvolatel\u016f, a \u00fanik t\u011bchto informac\u00ed by m\u011bl b\u00fdt pova\u017eov\u00e1n za poru\u0161en\u00ed jejich soukrom\u00ed&#8221;. Soud tak\u00e9 uvedl, \u017ee spole\u010dnost Benesse okam\u017eit\u011b zah\u00e1jila reakci po zji\u0161t\u011bn\u00ed \u00faniku, p\u0159ijala opat\u0159en\u00ed k zabr\u00e1n\u011bn\u00ed dal\u0161\u00edmu \u0161\u00ed\u0159en\u00ed \u0161kody z \u00faniku informac\u00ed, podala zpr\u00e1vu a provedla vy\u0161et\u0159ovac\u00ed zpr\u00e1vu na z\u00e1klad\u011b pokyn\u016f dozorov\u00e9ho org\u00e1nu. Spole\u010dnost tak\u00e9 odeslala omluvn\u00fd dopis z\u00e1kazn\u00edk\u016fm, u kter\u00fdch se p\u0159edpokl\u00e1dalo, \u017ee do\u0161lo k \u00faniku informac\u00ed, a podle volby z\u00e1kazn\u00edka distribuovala kup\u00f3ny v hodnot\u011b 500 jen\u016f. Soud zohlednil skute\u010dnost, \u017ee odvolatel\u00e9 obdr\u017eeli elektronick\u00fd d\u00e1rkov\u00fd poukaz v hodnot\u011b 500 jen\u016f, a na\u0159\u00eddil spole\u010dnosti Benesse, aby ka\u017ed\u00e9mu z nich zaplatila od\u0161kodn\u011bn\u00ed ve v\u00fd\u0161i 2000 jen\u016f.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Druhy_soudni_pripad_uznavajici_odpovednost_spolecnosti_Benesse\"><\/span>Druh\u00fd soudn\u00ed p\u0159\u00edpad uzn\u00e1vaj\u00edc\u00ed odpov\u011bdnost spole\u010dnosti Benesse<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Verdikt v soudn\u00edm sporu, ve kter\u00e9m 13 z\u00e1kazn\u00edk\u016f po\u017eadovalo od t\u00e9to spole\u010dnosti a jej\u00edch p\u0159idru\u017een\u00fdch spole\u010dnost\u00ed celkem 980 000 jen\u016f jako n\u00e1hradu \u0161kody, byl vyd\u00e1n dne 6. z\u00e1\u0159\u00ed 2019 (rok 2019 podle gregori\u00e1nsk\u00e9ho kalend\u00e1\u0159e) u tokijsk\u00e9ho okresn\u00edho soudu. Spole\u010dnostem Benesse a Shinform bylo na\u0159\u00edzeno zaplatit 3000 jen\u016f na osobu (jedna osoba 3300 jen\u016f), celkem 42 300 jen\u016f.<\/p>\n\n\n\n<p>Soud neschv\u00e1lil odpov\u011bdnost spole\u010dnosti Benesse jako zam\u011bstnavatele v\u016f\u010di spole\u010dnosti Shinform, kterou po\u017eadovali \u017ealobci, proto\u017ee se jedn\u00e1 o samostatnou pr\u00e1vnickou osobu. Nicm\u00e9n\u011b, spole\u010dnost Shinform nep\u0159ehodnotila nastaven\u00ed sv\u00e9ho bezpe\u010dnostn\u00edho softwaru, co\u017e umo\u017enilo p\u0159enos dat z pracovn\u00edch po\u010d\u00edta\u010d\u016f na smartphony kompatibiln\u00ed s MTP. Proto m\u011bla chybu v poru\u0161en\u00ed povinnosti kontrolovat v\u00fdstup informac\u00ed. Spole\u010dnost Benesse m\u011bla p\u0159i sv\u011b\u0159en\u00ed velk\u00e9ho mno\u017estv\u00ed informac\u00ed o z\u00e1kazn\u00edc\u00edch pro v\u00fdvoj tohoto syst\u00e9mu povinnost vybrat a dohl\u00ed\u017eet na sv\u00e9ho dodavatele podle z\u00e1sady dobr\u00e9 v\u00edry, v\u010detn\u011b \u017ealobc\u016f a ostatn\u00edch z\u00e1kazn\u00edk\u016f. Soud uznal spole\u010dn\u00e9 protipr\u00e1vn\u00ed jedn\u00e1n\u00ed (\u010dl\u00e1nek 719, odstavec 1, prvn\u00ed \u010d\u00e1st, japonsk\u00e9ho ob\u010dansk\u00e9ho z\u00e1kon\u00edku) a na\u0159\u00eddil jim spole\u010dn\u011b zaplatit \u017ealobc\u016fm n\u00e1hradu \u0161kody.<\/p>\n\n\n\n<p><a href=\"https:\/\/monolith.law\/reputation\/employer-liability-responsibility-in-defamation\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/monolith.law\/reputation\/employer-liability-responsibility-in-defamation[ja]<\/a><\/p>\n\n\n\n<p>V tomto rozsudku byl citov\u00e1n \u010dl\u00e1nek 22 japonsk\u00e9ho z\u00e1kona o ochran\u011b osobn\u00edch \u00fadaj\u016f, kter\u00fd stanov\u00ed, \u017ee &#8220;kdy\u017e subjekt zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f sv\u011b\u0159\u00ed zpracov\u00e1n\u00ed v\u0161ech nebo \u010d\u00e1sti osobn\u00edch \u00fadaj\u016f, mus\u00ed prov\u00e9st nezbytn\u00fd a vhodn\u00fd dohled nad subjektem, kter\u00e9mu bylo sv\u011b\u0159eno zpracov\u00e1n\u00ed, aby bylo zaji\u0161t\u011bno bezpe\u010dn\u00e9 \u0159\u00edzen\u00ed osobn\u00edch \u00fadaj\u016f&#8221;. D\u00e1le bylo pouk\u00e1z\u00e1no na pokyny ministerstva pr\u016fmyslu a obchodu z roku Heisei 21 (2009 podle gregori\u00e1nsk\u00e9ho kalend\u00e1\u0159e), kter\u00e9 uv\u00e1d\u011bj\u00ed, \u017ee &#8220;nezbytn\u00fd a vhodn\u00fd dohled&#8221; zahrnuje v\u00fdb\u011br vhodn\u00e9ho dodavatele, uzav\u0159en\u00ed nezbytn\u00e9 smlouvy s dodavatelem, aby dodr\u017eoval bezpe\u010dnostn\u00ed opat\u0159en\u00ed podle \u010dl\u00e1nku 20 z\u00e1kona o ochran\u011b osobn\u00edch \u00fadaj\u016f, a sledov\u00e1n\u00ed zpracov\u00e1n\u00ed sv\u011b\u0159en\u00fdch osobn\u00edch \u00fadaj\u016f u dodavatele.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Shrnuti\"><\/span>Shrnut\u00ed<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>P\u016fvodn\u011b m\u011bla spole\u010dnost Benesse p\u0159ipraveno 20 miliard jen\u016f jako kompenzaci pro ob\u011bti, ale uk\u00e1zalo se, \u017ee to nebude dosta\u010duj\u00edc\u00ed. V listopadu 2014 Japonsk\u00e1 asociace pro podporu informa\u010dn\u00ed ekonomiky a spole\u010dnosti odebrala spole\u010dnosti Benesse Holdings tzv. &#8220;Privacy Mark&#8221;, co\u017e je ozna\u010den\u00ed ud\u011blovan\u00e9 firm\u00e1m, kter\u00e9 spr\u00e1vn\u011b spravuj\u00ed osobn\u00ed \u00fadaje. Po\u010det \u010dlen\u016f &#8220;Shinken Seminar&#8221; a &#8220;Kodomo Challenge&#8221; v dubnu 2015 (rok 2015) byl 2,71 milionu, co\u017e je o 940 tis\u00edc m\u00e9n\u011b ne\u017e v p\u0159edchoz\u00edm roce. Konsolidovan\u00e9 v\u00fdsledky za obdob\u00ed od dubna do \u010dervna uk\u00e1zaly, \u017ee tr\u017eby klesly o 7% oproti stejn\u00e9mu obdob\u00ed p\u0159edchoz\u00edho roku a provozn\u00ed zisk klesl o 88%. Provozn\u00ed zisk se zm\u011bnil z \u010dern\u00fdch \u010d\u00edsel ve v\u00fd\u0161i 3,91 miliardy jen\u016f v p\u0159edchoz\u00edm roce na \u010derven\u00e9 \u010d\u00edslo 430 milion\u016f jen\u016f. Riziko n\u00e1hrady \u0161kody v d\u016fsledku \u00faniku osobn\u00edch \u00fadaj\u016f m\u016f\u017ee b\u00fdt pro spole\u010dnosti ot\u00e1zkou \u017eivota a smrti.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Rizika obklopuj\u00edc\u00ed podnikov\u00e9 \u0159\u00edzen\u00ed zahrnuj\u00ed krize v \u0159\u00edzen\u00ed, nehody zp\u016fsoben\u00e9 poru\u0161en\u00edm povinnosti podniku db\u00e1t na bezpe\u010dnost, ale v posledn\u00edch letech se st\u00e1v\u00e1 velk\u00fdm probl\u00e9mem tak\u00e9 riziko \u00faniku osobn [&hellip;]<\/p>\n","protected":false},"author":32,"featured_media":63361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[24,29],"acf":[],"_links":{"self":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61347"}],"collection":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/users\/32"}],"replies":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/comments?post=61347"}],"version-history":[{"count":2,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61347\/revisions"}],"predecessor-version":[{"id":63362,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/posts\/61347\/revisions\/63362"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/media\/63361"}],"wp:attachment":[{"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/media?parent=61347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/categories?post=61347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/monolith.law\/cs\/wp-json\/wp\/v2\/tags?post=61347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}