- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Debt collection service provider – €900,000 Fine (Germany, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A debt collection service provider was fined EUR 900,000 for unlawfully storing personal data for too long. This ruling is important because it stresses the need for companies to follow data retention rules.
What happened
The debt collection service provider stored personal data beyond the allowed time frame.
Who was affected
Individuals whose personal data was stored unlawfully by the company.
What the authority found
The Hamburg DPA determined that the company violated GDPR by retaining personal data for up to five years after it should have been deleted.
Why this matters
This case highlights the serious financial consequences of failing to comply with data retention laws. Companies must ensure they have processes in place to delete personal data when it is no longer needed.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 5 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Hamburg has imposed a fine of EUR 900,000 on a debt collection service provider. The company had unlawfully stored personal data (amounting to a six-digit number of data records) for up to five years after the erasure deadlines. The company admitted the violation, cooperated with the authorities and accepted the fine.
Related Enforcement Actions (0)
No other enforcement actions found for Debt collection service provider in DE
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 November 2024
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€900,000
Enforcement Tracker ID
ETid-2487
About this data
Cite as: Cookie Fines. Debt collection service provider - Germany (2024). Retrieved from cookiefines.eu
Last updated: