Information Commissioner (ICO) · 24 June 2025
Birthlink
Insufficient technical and organisational measures to ensure information security
Fine€20,725Fine issued
- Regulator
- Information Commissioner (ICO)
- Decided
- 24 June 2025
- Country
- United Kingdom
- Sector
- Individuals and Private Associations
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/GB/005
What happened
The DPA fined a company that provides 'after adoption' services GBP 18,000 (€20,707) for the unlawfully destruction of irreplaceable records related to adoptions. It found that the company failed to ensure appropriate security and organisational measures and violated the principle of accountability.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data breach
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/GB/005.