- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Car trading group – €10,100 Fine (Germany, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A car trading group in Germany was fined for sharing personal health information about an employee without proper consent. This matters because it shows that companies must be careful about how they handle sensitive information, especially regarding health data.
What happened
The car trading group informed 3,000 customers about an employee's health issue without a valid legal basis.
Who was affected
Customers of the car trading group who received information about the employee's health.
What the authority found
The DPA ruled that the company unlawfully processed personal health data by failing to provide a valid legal basis for sharing it.
Why this matters
This case highlights the importance of protecting sensitive information and obtaining proper consent. Companies should review their practices to ensure compliance with data protection laws.
Source checks
Linked-source text retrieved.
Review needed — 14 March 2026.
Processing notes: articles corrected, amount discrepancy, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Hamburg has imposed a fine of EUR 10,110 on a car trading group. The company had informed the customer base that the reasons for the restructuring there was the absence of an employee due to illness. The company informed approximately 3,000 customers, among other things, of the exact date on which the employee's inability to work occurred and that the situation would continue for an indefinite period of time. The DPA found that the company did not present a valid legal basis for such transfer of personal health data, and therefore transferred the data unlawfully.
Related Enforcement Actions (0)
No other enforcement actions found for Car trading group in DE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 January 2021
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€10,100
About this data
Cite as: Cookie Fines. Car trading group - Germany (2021). Retrieved from cookiefines.eu
Last updated: