Company – €11,500 Fine (Germany, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in the advertising sector was fined EUR 11,500 for not deleting personal data as required. This is significant because it shows that companies must follow rules about data retention and security.
What happened
The company failed to comply with its obligations to delete personal data and had technical security gaps in its IT system.
Who was affected
Individuals whose personal data was not deleted as required by law.
What the authority found
The authority found that the company did not meet its obligations for data deletion and had security issues.
Why this matters
This case serves as a reminder that companies must not only delete data when required but also ensure their systems are secure. Non-compliance can result in hefty fines.
Source checks
Linked-source text retrieved.
Review needed — 14 March 2026.
Processing notes: authority corrected, date discrepancy, articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Hamburg imposed a fine of EUR 11,500 on a company operating in the advertising industry for failing to comply with its deletion obligations. In addition, it was found that the company's IT system showed technical security gaps.
Related Enforcement Actions (20)
Other enforcement actions involving Company in DE
Fine
€12K
Details
Fine Date
1 January 2024
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€11,500
About this data
Cite as: Cookie Fines. Company - Germany (2024). Retrieved from cookiefines.eu
Last updated: