Company – €50,000 Fine (Germany, 2022)

€50,000Bundesbeauftragter für den Datenschutz1 January 2022Germany
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company was fined for sending sensitive personal information to all employees during layoffs. This is important because it shows that companies must protect private information and not share it unnecessarily.

What happened

The company disclosed personal information, including sensitive data, to all employees during a layoff process.

Who was affected

Employees who received the unredacted social plan containing personal details of their colleagues.

What the authority found

The DPA in Bremen ruled that the company unlawfully disclosed personal data without a legal basis, violating GDPR rules.

Why this matters

This case highlights the need for companies to handle sensitive information carefully and to ensure that only necessary data is shared, especially in sensitive situations like layoffs.

GDPR Articles Cited

AI-verified

Art. 5(1)(c) GDPR
View original scraped data
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
authority corrected
Full Legal Summary
Detailed

The DPA of Bremen has imposed a five-digit fine on a company. The company had sent an unredacted social plan to all affected employees in the context of dismissals due to operational reasons, resulting in the disclosure of personal data contained therein, such as date of birth, age, marital status, number of dependent children, function in the company, severe disability, etc., to all employees. The DPA found that such extensive disclosure of personal data was unlawful due to the lack of a legal basis. The DPA considered the fact that special categories of personal data, such as information on a severe disability, had also been disclosed to be an aggravating factor.

Related Enforcement Actions (20)

Other enforcement actions involving Company in DE

Current
Jan 2022

Fine

€50K

Details

Fine Date

1 January 2022

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€50,000

Enforcement Tracker ID

ETid-1723

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: