- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Restaurant – Fine (Germany, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A restaurant in Germany faced scrutiny for improperly disposing of guest registration forms used for contact tracing during the pandemic. This case matters because it shows the importance of protecting customer data, especially during health crises.
What happened
The restaurant discarded completed guest registration forms in a publicly-accessible dumpster.
Who was affected
Customers who filled out the registration forms for contact tracing.
What the authority found
The DPA found that the restaurant failed to implement adequate safeguards for the data it collected.
Why this matters
This incident underscores the necessity for businesses to protect personal data, particularly during sensitive times like a pandemic. Proper data disposal practices are essential to avoid breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 21 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A restaurant had disposed of 120 completed guest registration forms for contact tracing purposes during the Covid-19 pandemic in a publicly-accessible dumpster. During its investigation, the DPA also found that already during the restaurant's operation, the restaurant had not implemented adequate safeguards to protect the data processed during the guest registration process. For example, the completed guest registration forms were kept in an adjoining room accessible to all employees without special security measures, such as a locked cabinet.
Related Enforcement Actions (3)
Other enforcement actions involving Restaurant in DE
Fine
Details
Fine Date
1 January 2021
Authority
Bundesbeauftragter für den Datenschutz
About this data
Cite as: Cookie Fines. Restaurant - Germany (2021). Retrieved from cookiefines.eu
Last updated: