Enforcement
EN Birthlink: Insufficient technical and organisational measures to ensure information security
€20,725 fine - Information Commissioner (ICO)
Content
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
GDPR Articles: Art. 5 (1) f), (2) GDPR, Art. 32 (1), (2) GDPR, Art. 33 GDPR
Industry: Individuals and Private Associations