There is a company I am with that has decided to keep my personal information (Full Name, Phone number, Email, DoB, Address, Full phone history, and billing information) behind a web system protected by only a 4-digit PIN.
They can't remove this information for 45 days. They can't disable the PIN access.
My complaints are met with "This is a standard and secure system"
I think that maybe if I show them the responses here that action may be taken.
I've been waiting for 2 weeks for the "Chief Privacy Officer" to respond to my email.