Company – Fine (Germany, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Germany was found to lack proper security measures for personal data. This ruling is significant because it highlights the need for companies to protect user information.
What happened
A company did not implement sufficient technical and organizational measures to ensure information security.
Who was affected
Users whose personal data was handled by the company were affected by the security shortcomings.
What the authority found
The German data protection authority found that the company failed to meet necessary security standards for personal data.
Why this matters
This case shows that companies must prioritize data security to protect personal information. Website operators should regularly assess their security measures.
Source checks
Linked-source text retrieved.
Review needed — 8 October 2026.
Processing notes: amount discrepancy, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Insufficient technical and organisational measures to ensure information security
Related Enforcement Actions (20)
Other enforcement actions involving Company in DE
Fine
Details
Fine Date
1 January 2024
Authority
Bundesbeauftragter für den Datenschutz
Enforcement Tracker ID
2441
About this data
Cite as: Cookie Fines. Company - Germany (2024). Retrieved from cookiefines.eu
Last updated: