Nordbornholms Byggeforretning Aps – €53,800 Fine (Denmark, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Danish construction company was fined for sharing too much personal information about a former employee with customers. The data protection authority found that while the company had a reason to inform customers about the employee's dismissal, they went too far in detailing the allegations. This case highlights the need to balance transparency with privacy.
What happened
Nordbornholms Byggeforretning Aps shared excessive personal details about a former employee with customers.
Who was affected
A former employee of Nordbornholms Byggeforretning Aps, whose personal details were shared with customers.
What the authority found
The Danish DPA fined the company for unlawfully sharing detailed allegations about the former employee, which was deemed unnecessary.
Why this matters
This case underscores the importance of limiting personal data disclosures to what is necessary. Companies should ensure they do not overstep privacy boundaries when communicating about former employees.
GDPR Articles Cited
The Danish DPA ( Datatilsynet) has imposed a fine of EUR 53,800 on Nordbornholms Byggeforretning Aps. In 2018, the DPA was contacted by a data subject who complained that his former employer Nordbornholms Byggeforretning ApS, had disclosed information about him to the company's customers. The controller had emailed two of the company's customers informing them that the former employee had committed crimes in the course of employment and had admitted to committing them, as well as describing in detail the alleged course of events. According to the DPA, the controller in such a case had a legitimate interest in disclosing information about the former employee's dismissal to its customers and in informing the customers that, as a result, the employee could not enter into any contracts on behalf of the company. However, such a detailed description of the allegations was not necessary and thus unlawful.
Related Enforcement Actions (0)
No other enforcement actions found for Nordbornholms Byggeforretning Aps in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 July 2021
Authority
Datatilsynet (Denmark)
Fine Amount
€53,800
Enforcement Tracker ID
ETid-746
About this data
Cite as: Cookie Fines. Nordbornholms Byggeforretning Aps - Denmark (2021). Retrieved from cookiefines.eu
Last updated: