- Enforcing jurisdiction
- Denmark · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Nordbornholms Byggeforretning Aps – €53,800 Fine (Denmark, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Nordbornholms Byggeforretning Aps was fined for sharing sensitive information about a former employee with customers. This is important because it shows that companies must be cautious when disclosing personal information to avoid legal issues.
What happened
The company disclosed detailed allegations about a former employee's criminal behavior to its customers.
Who was affected
The former employee whose sensitive information was shared and the customers who received the information.
What the authority found
The Danish data protection authority ruled that the company had a legitimate interest in informing customers but shared more information than necessary, violating GDPR.
Why this matters
This ruling highlights the need for businesses to balance transparency with privacy. Companies should limit the details they share about employees to avoid legal repercussions.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 12 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Danish DPA ( Datatilsynet) has imposed a fine of EUR 53,800 on Nordbornholms Byggeforretning Aps. In 2018, the DPA was contacted by a data subject who complained that his former employer Nordbornholms Byggeforretning ApS, had disclosed information about him to the company's customers. The controller had emailed two of the company's customers informing them that the former employee had committed crimes in the course of employment and had admitted to committing them, as well as describing in detail the alleged course of events. According to the DPA, the controller in such a case had a legitimate interest in disclosing information about the former employee's dismissal to its customers and in informing the customers that, as a result, the employee could not enter into any contracts on behalf of the company. However, such a detailed description of the allegations was not necessary and thus unlawful.
Related Enforcement Actions (0)
No other enforcement actions found for Nordbornholms Byggeforretning Aps in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 July 2021
Authority
Datatilsynet (Denmark)
Fine Amount
€53,800
About this data
Cite as: Cookie Fines. Nordbornholms Byggeforretning Aps - Denmark (2021). Retrieved from cookiefines.eu
Last updated: