# Hørsholm municipality: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Danish Data Protection Authority (Datatilsynet)
- Date: 2022-09-12
- Original: https://www.enforcementtracker.com/ETid-1412
- Canonical: https://overview.legal/posts/47527
- Topics: Data Breaches, Security, Privacy by Design & Default, Public Authority, Education, Public Sector, Personal Data, IP Address, Processing Agreement, Supervisory Authorities

## Summary

The Danish DPA has imposed a fine of EUR 6,700 on Hørsholm municipality. The municipality had reported a data breach to the DPA pursuant to Art. 33 GDPR. An employee's work computer, which contained sensitive and confidential information about approximately 1,600 municipality employees, had been stolen. During its investigation, the DPA determined that the data on the computer was not adequately secured and that the municipality had failed to take appropriate technical measures to protect person

## Full text

The Danish DPA has imposed a fine of EUR 6,700 on Hørsholm municipality. The municipality had reported a data breach to the DPA pursuant to Art. 33 GDPR. An employee's work computer, which contained sensitive and confidential information about approximately 1,600 municipality employees, had been stolen. During its investigation, the DPA determined that the data on the computer was not adequately secured and that the municipality had failed to take appropriate technical measures to protect personal data.

GDPR Articles: Art. 32 GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47527 · 2026-08-22