Enforcing jurisdiction
Denmark · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Danish Immigration Agency – €20,100 Fine (Denmark, 2021)

€20,100Datatilsynet (Denmark)17 August 2021Denmark
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Danish Immigration Agency was fined EUR 20,100 for failing to protect personal data in its IT systems. This matters because it shows that government agencies must take data security seriously to protect residents' rights. The ruling highlights the importance of having proper backups and security measures in place.

What happened

The Danish Immigration Agency lost data records due to inadequate security measures in its IT systems.

Who was affected

Residents whose cash benefits were affected and who were reported to the police due to data loss.

What the authority found

The Danish Data Protection Authority found that the agency did not implement sufficient technical and organizational measures to protect personal data.

Why this matters

This case emphasizes that even government agencies can face penalties for poor data protection. Other organizations should ensure they have strong security practices to avoid similar issues.

Recorded legal citations
Automatically processed
Art. 32 GDPR
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 13 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Danish DPA has imposed a fine of EUR 20,100 on the Danish Immigration Agency. Media reports brought the DPA's attention to possible logging errors in one of the agency's IT systems, which could have an impact on the rights and freedoms of residents. The DPA consequently started an investigation at the agency. In spring and summer 2020, several security incidents occurred in the agency's systems, resulting in the loss of data records. The loss of data led to proceedings being initiated against a number of residents regarding the reduction of their cash benefits, and a number of residents being reported to the police for non-compliance with the provisions of the Foreigners Act. During its investigation, the DPA found that a lack of technical and organizational measures allowed the incident to occur. For instance, the agency had not made adequate backups of the data processed, although this would have been necessary in view of the legal consequences a loss of the data could mean for the immigrants.

Related Enforcement Actions (0)

No other enforcement actions found for Danish Immigration Agency in DK

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

17 August 2021

Authority

Datatilsynet (Denmark)

Fine Amount

€20,100

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Danish Immigration Agency - Denmark (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: