CDON AB – €25,000 Fine (Sweden, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
CDON AB received a fine of EUR 25,000 for transferring personal data to the US without proper protection. The Swedish data authority found that using standard contracts with Google Analytics did not ensure enough safety for users' data. This case highlights the importance of having strong data protection measures when dealing with international data transfers.
What happened
CDON AB unlawfully transferred personal data to the US while using Google Analytics.
Who was affected
Visitors to CDON AB's website whose personal data was transferred to the US.
What the authority found
The Swedish data authority ruled that CDON AB failed to provide adequate protection for personal data transferred to the US, violating GDPR requirements.
Why this matters
This ruling emphasizes that companies must ensure strong data protection when transferring data internationally. Other businesses using similar tools should reassess their data transfer practices.
GDPR Articles Cited
The Swedish DPA has imposed a fine of EUR 25,000 on CDON AB. The Austrian organization None of your Business (NOYB) had filed a complaint against the company in light of the Schrems II judgment, stating that the company was unlawfully transferring personal data to the US. The company had used Google Analytics for visitor statistics and based the data processing by the statistics tool on the EU standard contractual clauses in the absence of an EU Commission adequacy decision for the USA. In the course of its investigation, the DPA determined that the use of the standard contractual clauses was not sufficient to guarantee a level of protection equivalent to that of the EU.
Related Enforcement Actions (1)
Other enforcement actions involving CDON AB in SE
Details
Fine Date
30 June 2023
Authority
Integritetsskyddsmyndigheten
Fine Amount
€25,000
Enforcement Tracker ID
ETid-1938
About this data
Cite as: Cookie Fines. CDON AB - Sweden (2023). Retrieved from cookiefines.eu
Last updated: