Unknown
- Country
- Germany
- Fine
- 9,550,000 EUR
- Date
- 2019-12-09
- Sector
- Business Sector
- Articles
- Art. 32 GDPR
Inadequate technical and organisational measures to ensure information security
The Controller provides telecommunication services. The company's customer service team identified the caller simply by name and date of birth. The Federal Data Protection Officer did not consider this identification procedure to be sufficient in accordance with Art. 32 GDPR. Due to the company's cooperation with the data protection authority, the fine imposed was at the lower end of the scale. Authority: The Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Source: https://www.bfdi.bund.de/DE/Infothek/Pressemitteilungen/2019/30_BfDIverhängtGeldbuße1u1.html
Reported by: Derra, Meyer & Partner