Enforcing jurisdiction
Estonia · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Asper Biogene OÜ – Fine (Estonia, 2025)

Fine
Andmekaitse Inspektsioon10 January 2025Estonia
overturned
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Estonian DPA initially fined Asper Biogene OÜ for a data leak but the Tartu County Court later overturned this decision. This situation highlights the ongoing legal challenges companies face regarding data protection.

What happened

Asper Biogene OÜ was fined for a data leak due to inadequate security measures.

Who was affected

Individuals whose personal, health, and genetic data was compromised in the leak.

What the authority found

The court overturned the DPA's fine, indicating a legal dispute over the enforcement of data protection rules.

Why this matters

This case illustrates the complexities of data protection enforcement and the importance of having robust security measures in place to protect personal data.

Source checks

Linked-source text retrieved.

Review needed — 20 March 2026.

Processing notes: articles corrected, amount discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Estonian DPA imposed a fine of EUR 85,000 on Asper Biogene OÜ. Asper Biogene OÜ suffered a data leak due to a lack of adequate security measures. The leak affected approximately 100,000 files containing personal, health and genetic data. Asper Biogene OÜ also appointed a member of the board of directors as DPO, resulting in a conflict of interest. A fine of EUR 80,000 was imposed for the inadequate security measures. The unlawful appointment of the DPO was fined EUR 5,000. ---UPDATE--- The Tartu County Court overturned the DPA's decision. The DPA has appealed against the court's decision.

Related Enforcement Actions (0)

No other enforcement actions found for Asper Biogene OÜ in EE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

10 January 2025

Authority

Andmekaitse Inspektsioon

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Asper Biogene OÜ - Estonia (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: