Dutch Supervisory Authority for Data Protection (AP) · 10 December 2020
Booking.com B.V.
Insufficient fulfilment of data breach notification obligations
Fine€475,000Fine issued
- Regulator
- Dutch Supervisory Authority for Data Protection (AP)
- Decided
- 10 December 2020
- Country
- Netherlands
- Sector
- Accommodation and Hospitality
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/NL/007
What happened
The Dutch Data Protection Authority (AP) imposed a fine of €475,000 on Booking.com for reporting a data breach with undue delay. Booking.com became aware of the data breach on 13 January 2019 but did not report it to the AP until February 7, which is 22 days too late.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data breach
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/NL/007.