Re:The personal info of what could be Instacart customers is...
by lmkg on Thursday July 23, 2020 @10:31AM
(#23927721)
GDPR has a requirement that data be accurate (Article 5, section 1 d). This is applicable in practice because of the Right to Rectification, Article 16.
The initial issue is probably not a violation of GDPR, and not a reportable data breach. However, not fixing the issue after it was brought to their attention is more likely to be a violation.
https://gdpr-info.eu/art-16-gdpr/
The initial issue is probably not a violation of GDPR, and not a reportable data breach. However, not fixing the issue after it was brought to their attention is more likely to be a violation.