I've recently registered in an eCommerce platform to sell some items and once I've completed registration process they sent me an e-mail with my username and password. I didn't like it, but I logged in and changed my password to avoid anyone with access to that e-mail during the sending process to use it, and I received another e-mail with my username and new changed password. I'm still waitng for my rage to go away before complaining to that website.

I've complained many times to other eCommerce platforms about asking for personal data in unencrypted webpages and they have no idea what I'm talking about . And National Data Protection Agency, to whom I've complained, replied that it's recommended to encrypt personal data sent over the Internet, but not mandatory.

What kind of dumbasses are in charge of IT departments and Data Protection Laws?