Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Covid-19 test center – €1,800 Fine (Germany, 2022)

€1,800Bundesbeauftragter für den Datenschutz1 January 2022Germany
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Covid-19 test center was fined for carelessly displaying personal data on a label attached to its window. An employee reused a label from the trash that still had someone's personal information visible for about 24 hours. This incident shows the importance of being careful with personal data.

What happened

An employee at the Covid-19 test center displayed personal data on a label attached to the center's window.

Who was affected

The individual whose personal data was exposed on the label.

What the authority found

The authority imposed a fine because the test center failed to protect personal data and did not act responsibly.

Why this matters

This ruling highlights the need for businesses to train employees on data handling and to ensure that personal information is not accidentally exposed. It serves as a warning to all organizations about the risks of mishandling personal data.

Recorded legal citations
Automatically processed
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
f) GDPR
Art. 6(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 16 March 2026.

Processing notes: articles corrected, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The DPA of Hessen imposed a fine of EUR 1,800 on a Covid-19 test center. An employee had taken an adhesive label from the trash, written the test center's e-mail address on it and attached it to the center's window. However, due to a lack of care, the employee did not notice that the label still contained personal data of an individual. The data was therefore visible to third parties for about 24 hours until the label was removed.

Related Enforcement Actions (0)

No other enforcement actions found for Covid-19 test center in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2022

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€1,800

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Covid-19 test center - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: