Company – €11,500 Fine (Germany, 2024)

€11,500Bundesbeauftragter für den Datenschutz1 January 2024Germany
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A company in the advertising sector was fined EUR 11,500 for not deleting personal data as required. This is significant because it shows that companies must follow rules about data retention and security.

What happened

The company failed to comply with its obligations to delete personal data and had technical security gaps in its IT system.

Who was affected

Individuals whose personal data was not deleted as required by law.

What the authority found

The authority found that the company did not meet its obligations for data deletion and had security issues.

Why this matters

This case serves as a reminder that companies must not only delete data when required but also ensure their systems are secure. Non-compliance can result in hefty fines.

Source verified 14 March 2026
authority corrected
date discrepancy
articles corrected
Full Legal Summary
Detailed

The DPA of Hamburg imposed a fine of EUR 11,500 on a company operating in the advertising industry for failing to comply with its deletion obligations. In addition, it was found that the company's IT system showed technical security gaps.

Related Enforcement Actions (20)

Other enforcement actions involving Company in DE

Current
Jan 2024

Fine

€12K

Details

Fine Date

1 January 2024

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€11,500

Enforcement Tracker ID

ETid-2443

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Germany (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: