Enforcement · Data Protection Authority of Baden-Wuerttemberg EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Food company: Insufficient technical and organisational measures to ensure information security

€100,000 Fine
Food company
GERMANY
Art. 5 GDPR Art. 32 GDPR
Encryption Security Inspection Access Rights and Cooperation Obligations Healthcare Supervisory Authorities
Oct 24, 2019 Source

How it connects

Related across sources

Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law VG Düsseldorf - 29 K 3490/24 Administrative Court Düsseldorf News Support the work of the EDPB as an expert. EDPB Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Case Law Judgment of the Court (Third Chamber) of 28 November 2024.#Nemzeti Adatvédelmi és Információszabadság Hatóság v UC.#Request for a preliminary ruling from the Kúria.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data and the free movement of such data – Regulation (EU) 2016/679 – Data processed when drawing up a COVID-19 certificate – Data not collected from the data subject – Information to be provided – Exception to the obligation t Court of Justice of the European Union Guidance Guidelines 04/2022 on the calculation of administrative fines under the GDPR EDPB

Full text

The company had set up an applicant portal on its website where interested parties could submit their application documents online. However, the company did not offer an encrypted transmission of the data, nor did it store the applicant data in an encrypted or password-protected manner. In addition, the unsecured applicant data was linked to Google, so that anyone searching for the respective applicant names on Google could find their application documents and retrieve them without access restrictions.

Industry: Accomodation and Hospitality

Original document at the source www.baden-wuerttemberg.datenschutz.de

Similar Content