Enforcement · Data Protection Authority of Baden-Wuerttemberg EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Company in the financial sector: Insufficient technical and organisational measures to ensure information security

€80,000 Fine
Company in the financial sector
GERMANY
Art. 5 GDPR Art. 32 GDPR
Integrity and Confidentiality Principle Security Anonymization Professional Secrecy Insurance Personal Data Law Enforcement Supervisory Authorities
Apr 12, 2019 Source

How it connects

Related across sources

News DeFine is a calculator for GDPR fines based on method of the EDPB Kromann Reumert Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Supreme Court Case Law Judgment of the Court (Third Chamber) of 25 January 2024.#BL v MediaMarktSaturn Hagen-Iserlohn GmbH.#Request for a preliminary ruling from the Amtsgericht Hagen.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Interpretation of Articles 5, 24, 32 and 82 – Assessment of the validity of Article 82 – Inadmissibility of the request for an assessment of validity – Right to compensation for damage caused by Court of Justice of the European Union Case Law VB v Natsionalna agentsia za prihodite CJEU Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet

Full text

In an administrative decision dated 12 April 2019, the authority imposed a fine of 80,000 euros on a medium-sized financial services company. This company had failed to take the necessary care to preserve the integrity and confidentiality of information within the meaning of Art. 5 para. 1 lit. f GDPR when disposing of documents containing personal data of two customers. Thus, without prior anonymisation, the papers were disposed of in the general waste paper recycling system, where the documents were found by a neighbour.

Industry: Finance, Insurance and Consulting

Original document at the source www.baden-wuerttemberg.datenschutz.de

Similar Content