Outcomes - Selected Case Summaries



Unprotected Food Delivery Website

Informal Resolution | 08 July 2020

A complainant was concerned about an online delivery service, where he could access his and other people’s personal data such as order details, email address, phone number, location and order wallet amount without signing into the site.

The company was informed of these concerns and immediately made changes to their site to lock down these vulnerabilities. The complainant was satisfied that he could no longer view any of the personal data he had previously been able to access through the site. The case was closed with no further action required.