Enforcement
EN PrivatBo A.M.B.A.: Insufficient technical and organisational measures to ensure information security
€20,100 fine - Danish Data Protection Authority (Datatilsynet)
Content
The company had distributed USB sticks to tenants in the context of a sale of real estate, which contained not only non-personal information on the real estate objects in question but also personal data of other persons such as lease agreements and other documents containing confidential personal data.
GDPR Articles: Art. 5 GDPR, Art. 32 GDPR
Industry: Real Estate