- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Company – €20,000 Fine (Germany, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company was fined EUR 20,000 for creating an office plan that revealed employees' vaccination statuses. The plan assigned colors to employees based on their vaccination status, which was deemed unlawful. This case underscores the need for careful handling of sensitive health information.
What happened
The company developed an office plan that disclosed employees' vaccination statuses through a color-coding system.
Who was affected
Employees whose vaccination statuses were disclosed through the office plan.
What the authority found
The DPA ruled that the color system unlawfully disclosed the vaccination status of all employees.
Why this matters
This ruling highlights the importance of protecting sensitive health information in the workplace. Companies must be cautious about how they share and display such information.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA from Baden-Württemberg has imposed a fine of EUR 20,000 on a company. The company had developed a new office plan that took into account the vaccination status of its employees. For information purposes, the office plan showing the new occupancy was sent to the employees. Each employee was assigned a color (green, yellow or red) depending on their vaccination status. The DPA found that the color system allowed the disclosure of the vaccination status of all employees and was therefore unlawful.
Related Enforcement Actions (13)
Other enforcement actions involving Company in DE
Fine
€20K
Details
Fine Date
1 January 2022
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€20,000
About this data
Cite as: Cookie Fines. Company - Germany (2022). Retrieved from cookiefines.eu
Last updated: