Unknown – €4,113,486 Fine (Germany, 2024)

Unknown

Late notification of a data breach and failure to notify the data subjects.

Insufficient legal basis for data processing

In a digital publication, health data was accidentally published due to inadequate internal control mechanisms.

A data controller failed to comply with data subject´s request to access their personal data.

A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel...

Insufficient legal basis for data processing

The Bavarian DPA has imposed a fine on a company. The controller had refused access to the business premises and data processing equipment during an o...

Insufficient technical and organisational measures to ensure information security

Unknown

In order to combat the Covid 19 pandemic, a cemetery had put out an open list in which visitors had to enter their contact data. A cemetery employee o...

Insufficient technical and organisational measures to ensure information security

Insufficient legal basis for data processing

The DPA of Thüringen has imposed a fine on a controller. The controller had installed a video surveillance camera in the public entrance area of an ap...

The DPA of Hessen has imposed fines totaling EUR 13,486 on 41 data controllers. In its 2024 activity report, the DPA of Hesse reported a total of 47 f...