Large Social Media Company
- Country
- Germany
- Fine
- 51,000 EUR
- Date
- 2020-02-13
- Sector
- Business Sector
- Articles
- Art. 37 GDPR
Lack of appointment of data protection officer
Altough Facebook Ireland had appointed a data proteciton officer for all Facebook companies located in the EU, Facebook Germany GmbH did not notify this appointment to the Hamburg Data Protection Authority. The fine was calculated only on the basis of the turnover of the German branch (EUR 35 million) and not on the basis of Facebooks worldwide turnover. As relevant factors for the calculation were named inter alia that the omitted notification was immediately made up for, Facebook acted negligently and did not violate the duty to appoint a data protection officer but only the notification obligation. Authority: Data Protection Authority of Hamburg
Source: https://datenschutz-hamburg.de/assets/pdf/28._Taetigkeitsbericht_Datenschutz_2019_HmbBfDI.pdf
Reported by: Derra, Meyer & Partner
