Danish Data Protection Authority (Datatilsynet) · 11 August 2022
Lolland municipiality
Insufficient technical and organisational measures to ensure information security
- Regulator
- Danish Data Protection Authority (Datatilsynet)
- Decided
- 11 August 2022
- Country
- Denmark
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/DK/002
What happened
The Danish DPA proposed a €6,700 fine against a municipality for not preventing its employees from manually disabling access codes on their mobile phones that contained citizens' personal data, thereby exposing them to unnecessary risk. The police will investigate the case before a final decision is made in the courts.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/DK/002.