Unknown – €50,800 Fine (Germany, 2019)

Late notification of a data breach and failure to notify the data subjects.

Unknown

A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel...

Insufficient legal basis for data processing

A data controller failed to comply with data subject´s request to access their personal data.

In a digital publication, health data was accidentally published due to inadequate internal control mechanisms.

The Bavarian DPA has imposed a fine on a company. The controller had refused access to the business premises and data processing equipment during an o...

Insufficient technical and organisational measures to ensure information security

Unknown

In order to combat the Covid 19 pandemic, a cemetery had put out an open list in which visitors had to enter their contact data. A cemetery employee o...

Insufficient technical and organisational measures to ensure information security

The DPA of Thüringen has imposed a fine on a controller. The controller had installed a video surveillance camera in the public entrance area of an ap...

Insufficient legal basis for data processing

Unknown

The DPA of Hessen has imposed fines totaling EUR 13,486 on 41 data controllers. In its 2024 activity report, the DPA of Hesse reported a total of 47 f...