Car trading group – €10,100 Fine (Germany, 2021)

€10,100Bundesbeauftragter für den Datenschutz1 January 2021Germany
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A car trading group in Germany was fined over EUR 10,000 for sharing an employee's health information with customers. The company lacked a valid reason to disclose such personal data, violating privacy laws. This case shows the importance of protecting employee privacy and handling sensitive information carefully.

What happened

The car trading group shared an employee's health details with about 3,000 customers without a valid reason.

Who was affected

The employee whose health information was disclosed to customers without consent.

What the authority found

The data protection authority fined the company for unlawfully sharing personal health data without a valid legal basis.

Why this matters

This case emphasizes the need for companies to protect employee privacy and ensure they have a valid reason before sharing sensitive information. It serves as a reminder to review data handling practices, especially concerning health data.

Full Legal Summary
Detailed

The DPA of Hamburg has imposed a fine of EUR 10,110 on a car trading group. The company had informed the customer base that the reasons for the restructuring there was the absence of an employee due to illness. The company informed approximately 3,000 customers, among other things, of the exact date on which the employee's inability to work occurred and that the situation would continue for an indefinite period of time. The DPA found that the company did not present a valid legal basis for such transfer of personal health data, and therefore transferred the data unlawfully.

Related Enforcement Actions (0)

No other enforcement actions found for Car trading group in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2021

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€10,100

Enforcement Tracker ID

ETid-1303

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Car trading group - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: