Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.

Unknown – €294,000 Fine (Germany, 2019)

€294,000Bundesbeauftragter für den Datenschutz1 January 2019Germany
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A company in Germany was fined for keeping personnel files for too long and collecting excessive data during hiring. This practice violated privacy rules and raised concerns about data management. It serves as a reminder for companies to handle personal data responsibly.

What happened

The company retained personnel files longer than necessary and collected excessive information, including health data, during recruitment.

Who was affected

Job applicants and employees whose personal data was improperly collected and stored by the company.

What the authority found

The authority ruled that the company violated privacy rules by not adhering to proper data retention and collection practices.

Why this matters

This case underscores the importance of proper data management for companies. It highlights the need to limit data collection and retention to what is necessary.

Recorded legal citations
Automatically processed
Art. 5 GDPR
View original scraped data
Art. 5 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 6 March 2026.

Processing notes: amount discrepancy, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.

Details

Fine Date

1 January 2019

Authority

Bundesbeauftragter für den Datenschutz

Fine Amount

€294,000

Enforcement Tracker ID

ETid-170

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Unknown - Germany (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: