GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Social Media Chat Platform

Country
Germany
Fine
20,000 EUR
Date
2018-11-21
Sector
Private Sector
Articles
Art. 32 GDPR

Insufficient technical and organisational measures to ensure information security

After a hacker attack in July, the personal data of approximately 330,000 users, such as passwords and e-mail addresses, became known. The controller has notified this personal data breach (Art. 4 Subsect. 12 GDPR) according to Art. 33 GDPR to the respective data protection authority and also cooperated with the data protection authority. Due to the cooperation and the performance of the controller, the fine was only 20.000,00 Authority: Data Protection Authority of Baden-Wuerttemberg