GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Large Social Media Company

Country
Germany
Fine
51,000 EUR
Date
2020-02-13
Sector
Business Sector
Articles
Art. 37 GDPR

Lack of appointment of data protection officer

Altough Facebook Ireland had appointed a data proteciton officer for all Facebook companies located in the EU, Facebook Germany GmbH did not notify this appointment to the Hamburg Data Protection Authority. The fine was calculated only on the basis of the turnover of the German branch (EUR 35 million) and not on the basis of Facebooks worldwide turnover. As relevant factors for the calculation were named inter alia that the omitted notification was immediately made up for, Facebook acted negligently and did not violate the duty to appoint a data protection officer but only the notification obligation. Authority: Data Protection Authority of Hamburg