Data Protection Authority of Baden-Wuerttemberg · 24 October 2019
Food company
Insufficient technical and organisational measures to ensure information security
- Regulator
- Data Protection Authority of Baden-Wuerttemberg
- Decided
- 24 October 2019
- Country
- Germany
- Sector
- Accommodation and Hospitality
- Regulator’s reference
- Not recorded
- Fino case number
- 2019/DE/011
What happened
The LfDI (Baden-Württemberg) imposed a fine of EUR 100,000 on an medium-sized food craft company. The data controller unlawfully processed personal data and violated Article 5(1)(f) GDPR. It also did not process personal data with an appropriate level of security, as required by Article 32 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2019/DE/011.