- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Humboldt Forum Service GmbH – €215,000 Fine (Germany, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Humboldt Forum Service GmbH was fined €215,000 for improperly handling sensitive employee information. They documented personal details about employees, including health concerns and employment assessments, without a valid reason. This case highlights the importance of protecting sensitive data in the workplace.
What happened
Humboldt Forum Service GmbH improperly documented sensitive information about employees and assessed their employment status based on this information.
Who was affected
Employees of Humboldt Forum whose sensitive personal information was documented and assessed.
What the authority found
The authority found that Humboldt Forum had no valid legal basis to process sensitive employee data, violating data protection rules.
Why this matters
This ruling emphasizes that companies must have a legitimate reason to handle sensitive employee data. It serves as a reminder for businesses to review their data handling practices to ensure compliance with privacy laws.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Berlin has imposed fines totaling EUR 215,000 on Humboldt Forum Service GmbH. Humboldt Forum had improperly documented sensitive information about individual employees and assessed their continued employment as 'critical' or 'very critical' on the basis of the information. The document also contained information on personal statements, health concerns, a possible interest in forming a works council and treatment in psychotherapy. During its investigation, the DPA found that the controller did not have a valid legal basis to process such sensitive data.
Related Enforcement Actions (0)
No other enforcement actions found for Humboldt Forum Service GmbH in DE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 January 2023
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€215,000
About this data
Cite as: Cookie Fines. Humboldt Forum Service GmbH - Germany (2023). Retrieved from cookiefines.eu
Last updated: