- Enforcing jurisdiction
- Denmark · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Lolland municipiality – €6,700 Fine (Denmark, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Lolland municipality was fined €6,700 after a stolen employee phone exposed sensitive data. The phone lacked password protection, which allowed access to personal information of several citizens. This case illustrates the critical need for organizations to enforce security measures to safeguard personal data.
What happened
An employee's unprotected work phone was stolen, leading to a data breach involving personal information.
Who was affected
Citizens whose names, social security numbers, and health data were accessible on the stolen phone.
What the authority found
The authority found that the municipality did not take sufficient measures to protect personal data, violating GDPR security requirements.
Why this matters
This ruling serves as a reminder for all organizations to implement robust security measures for devices that handle personal data. It stresses the need for compliance with data protection regulations to avoid penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Danish DPA has imposed a fine of EUR 6,700 on Lolland municipiality. The municipality had reported a data breach to the DPA in accordance with Art. 33 GDPR. One of the municipality's employees had their work phone stolen. The employee used the phone to access their work email account which contained information on the names of several citizens, social security numbers and health data. During its investigation, the DPA found that the phone was not protected by a password. Therefore, it was possible to access the information stored on the phone. The DPA concluded that this incident had occurred due to the municipality's failure to take sufficient technical and organizational measures to protect personal data. The municipality should have ensured, at least, that each employee secured their cell phone with a password.
Related Enforcement Actions (0)
No other enforcement actions found for Lolland municipiality in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
11 August 2022
Authority
Datatilsynet (Denmark)
Fine Amount
€6,700
Enforcement Tracker ID
ETid-1330
About this data
Cite as: Cookie Fines. Lolland municipiality - Denmark (2022). Retrieved from cookiefines.eu
Last updated: