- Enforcing jurisdiction
- Denmark · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Vejle Municipality – €27,000 Fine (Denmark, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Vejle Municipality was fined €27,000 for sending welcome letters to parents that included each other's contact details without checking if it was allowed. This breach of data protection rules affected parents who had name protection, meaning their information should have been kept private. The case serves as a reminder for organizations to implement strong data protection measures to safeguard personal information.
What happened
Vejle Municipality sent automated letters containing parents' contact details without verifying if it was appropriate to share that information.
Who was affected
Parents of children receiving dental care from Vejle Municipality, some of whom had name protection.
What the authority found
The Danish data protection authority concluded that the municipality failed to take necessary measures to protect personal data, violating GDPR standards.
Why this matters
This ruling stresses the importance of data protection in public services. Organizations must ensure they have proper checks in place to protect sensitive information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Danish DPA (Datatilsynet) has imposed a fine of EUR 27,000 on Vejle municipality. The Danish DPA had started investigations against the municipality after it had reported a data breach pursuant to Art. 33 GDPR. The municipal dental care service had sent automated welcome letters to both parents as part of the treatment of children, which contained the contact details of both parents. In this process, the municipality had not checked whether it was permitted to pass the information on to the other parent. In several cases, parents thus received the address of the other parent, regardless of whether the other parent had name and address protection. The DPA considered this to be a failure of the municipality to take technical and organizational measures to ensure adequate data protection.
Related Enforcement Actions (0)
No other enforcement actions found for Vejle Municipality in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 June 2021
Authority
Datatilsynet (Denmark)
Fine Amount
€27,000
About this data
Cite as: Cookie Fines. Vejle Municipality - Denmark (2021). Retrieved from cookiefines.eu
Last updated: