Municipality of Frederiksberg – €13,450 Fine (Denmark, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Denmark's Datatilsynet fined the Municipality of Frederiksberg EUR 13,450 for a data breach. The breach happened when parents with joint custody accessed sensitive information about each other and their children, violating security rules. This case highlights the importance of protecting personal data, especially in sensitive family situations.
What happened
The Municipality of Frederiksberg allowed parents with joint custody to access sensitive information about each other and their children online, leading to a data breach.
Who was affected
Parents and children whose personal information, including addresses, was exposed online due to the municipality's system.
What the authority found
The Danish DPA found that the municipality failed to implement adequate security measures to protect personal data, violating GDPR's security requirements.
Why this matters
This case underscores the need for public institutions to ensure robust data protection measures, especially when handling sensitive family information. It serves as a reminder for organizations to regularly review and update their security protocols.
GDPR Articles Cited
The Danish DPA has fined the municipality of Frederiksberg EUR 13,450. On March 1, 2021, the municipality reported a data breach under Art. 33 GDPR. The municipality's dental care service had operated a system through which parents could access their children's dental care letters online. The municipality then extended this access to parents with joint custody. As a result, in several cases, parents gained access to information about the other parent and the child's address, even though the affected parent and child were registered with name and address protection. The DPA considered this to be a breach of the municipality's duty to implement adequate technical and organizational measures to ensure a level of security appropriate to the risk to the data subjects.
Related Enforcement Actions (0)
No other enforcement actions found for Municipality of Frederiksberg in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 December 2021
Authority
Datatilsynet (Denmark)
Fine Amount
€13,450
Enforcement Tracker ID
ETid-954
About this data
Cite as: Cookie Fines. Municipality of Frederiksberg - Denmark (2021). Retrieved from cookiefines.eu
Last updated: