Vejle Municipality – €27,000 Fine (Denmark, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Denmark's privacy watchdog fined Vejle Municipality EUR 27,000 for a data breach involving parental contact information. The municipality sent letters revealing parents' addresses without checking if they were protected. This case underscores the need for careful handling of personal data.
What happened
Vejle Municipality sent letters containing parents' contact details without verifying if the information was protected, leading to a data breach.
Who was affected
Parents whose contact details were shared with the other parent without consent or verification of protection status.
What the authority found
The Danish DPA concluded that Vejle Municipality failed to implement adequate measures to protect personal data, violating GDPR requirements.
Why this matters
This ruling emphasizes the importance of verifying data protection measures before sharing personal information. Organizations should ensure robust data handling practices to prevent breaches and protect individuals' privacy.
GDPR Articles Cited
The Danish DPA (Datatilsynet) has imposed a fine of EUR 27,000 on Vejle municipality. The Danish DPA had started investigations against the municipality after it had reported a data breach pursuant to Art. 33 GDPR. The municipal dental care service had sent automated welcome letters to both parents as part of the treatment of children, which contained the contact details of both parents. In this process, the municipality had not checked whether it was permitted to pass the information on to the other parent. In several cases, parents thus received the address of the other parent, regardless of whether the other parent had name and address protection. The DPA considered this to be a failure of the municipality to take technical and organizational measures to ensure adequate data protection.
Related Enforcement Actions (0)
No other enforcement actions found for Vejle Municipality in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 June 2021
Authority
Datatilsynet (Denmark)
Fine Amount
€27,000
Enforcement Tracker ID
ETid-730
About this data
Cite as: Cookie Fines. Vejle Municipality - Denmark (2021). Retrieved from cookiefines.eu
Last updated: