Data Protection Academy » Data Protection News » Examples of GDPR fines

Examples for DSGVO fines

Examples of GDPR fines: what happens in data protection

GDPR violations are penalised with high fines. The first data protection fines totalling millions have also been enforced in Germany. The inspections by the data protection supervisory authorities and an example of how fines are calculated can be found in the Data protection fine concept of the DSK are increasing.

GDPR violations

Personal data

What are personal data in data protection? What must be observed when processing in accordance with GDPR?
Read more

Data protection supervisory authority

Tasks, powers and responsibilities of data protection supervisory authorities. In Europe and in Germany per federal state
Read more

Record of processing activities

List of processing activities according to Art. 30 GDPR. Explained step by step with extensive information. Data protection made easy.
Read more

Technical organisational measures (TOMs)

All information on the technical organisational measures according to the GDPR. What do responsible parties have to observe during implementation and documentation?
Read more
Whatsapp Privacy

WhatsApp and privacy

The messenger service WhatsApp is part of the Facebook group to which Instagram also belongs. At the beginning of 2021, Whatsapp announced an adjustment of its privacy policy. What can users do?
Read more

Create a GDPR-compliant data processing agreement

All information on the data processing agreement according to GDPR. What do controllers have to consider when creating and managing?
Read more

Informational self-determination

The right to informational self-determination has increasing importance in the digital age and is directly related to data protection and the GDPR.
Read more

data protection impact assessment

Detailed description of the data protection impact assessment pursuant to Article 35 of the GDPR as well as specifications for the practical implementation of the DPIA.
Read more

Data protection

Data protection is generally the protection of personal data of each individual against their unauthorised collection, processing and disclosure.
Read more

Examples of GDPR fines: what happens in data protection

GDPR infringements are punished with heavy fines. Find out which data protection infringements are suspected and secure yourself.
Read more

Data protection and data security while working from home

What do employers and employees need to be aware of? Concrete tips on data protection and advice on data security.
Read more

Use of social networks by public authorities

Social networks are often not DSGVO compliant. Data protection and social media use in public authorities: Important instrument or contradiction in terms?
Read more

Data breach at Klarna: Third party data visible

Entering a postcode and e-mail was sufficient to view third party data. The autofill function is to blame.
Read more

Data protection fine imposed on the Municipality of Oslo Education Authority

120.000 € because the security of the app "Skolemelding" for communication between school staff, parents and pupils was not guaranteed.
Read more
Quotations Digitization

Privacy issues in 2020: Interview with the BfDI office

Learn more about: Data processing by Facebook, Goolge & Co. Fines imposed by regulatory authorities. The impact of brexite on data protection in Europe.
Read more

Data breach Microsoft customer records leaked

In December 2019, 250 million support requests to Microsoft were available online for two days. Security researchers reported the data breach to Microsoft.
Read more

End of support for Windows 7

As of 14.01.2020 there are no more security updates. Find out why this means a high risk for data protection and IT security.
Read more

British government published private addresses of stars

The British government publishes the addresses of around 1000 celebrities, politicians and private individuals who receive the traditional New Year's honours.
Read more

Data breach at Phoenix: sensitive data sent by pharmacies

An employee unintentionally sent delivery and turnover data of 211 pharmacies by fax. Data protection officers were involved.
Read more

Data failure in the district office Coburg

Allegedly deleted data on a hard drive came into circulation: Some 12,000 documents, e-mails and passwords were released.
Read more

Data breach employees fashion house H&M

The Swedish fashion house H&M is accused of having sounded out its employees. This also involved sensitive health data.
Read more

Data protection fine Swedish company

35,000 euros fine for violation of three Swedish laws at once. Information about creditworthiness published.
Read more

Highest data protection fine to date hits Delivery Hero

In August, the Berlin data protection commissioner had already imposed the highest German fine to date, amounting to 195,407 euros.
Read more

Data protection fine for the City of Oslo

EUR 50 000 fine for a serious infringement by the City of Oslo. Over a period of 11 years, patient data was incorrectly processed.
Read more

Documentation requirements of the GDPR

Documentation requirements of the DSGVO: Every company must document data protection measures. But what exactly must be documented?
Read more

Data breakdown frequent flyer programme Miles & More

Lufthansa's frequent flyer programme confirms data breakdown. Thousands of users had access to foreign profiles.
Read more

BfDI imposes fine on Rapidata GmbH

No appointment of a data protection officer despite repeated requests. Expensive even for small companies.
Read more

BfDI imposes fine on telecommunications service provider

1&1 Telecom GmbH has to pay a fine of EUR 9,550,000 for insufficient technical and organisational measures.
Read more

GDPR ruling video surveillance medical practice

Data protection and video surveillance: How can you apply the BVerwG ruling to your practice?
Read more

Data protection fine for hospital in Rhineland-Palatinate

In addition to various data protection violations, one patient was confused when he was admitted to the hospital.
Read more

Fines imposed on public bodies in Belgium

Data used without permission for election campaigns. You can read about why the Belgian supervisory authority punishes public bodies particularly severely in the article.
Read more

Data breach patient data sent to wrong recipient

Nationwide NDR survey revealed that patient data is sent to the wrong recipients. Now data protection is threatened with a fine.
Read more

Data breach in medical practice: patient data online

Patient data of a medical practice publicly accessible for several months. The reason was a weakness of the router used.
Read more

Data protection fine la Tribuna de Pamplona Spain

The portal La Tribuna de Cartagena published information about a person who was the victim of a crime in 2018 without their consent.
Read more

Data protection fine due to revocation of consent

To what extent did the company that was punished violate the DSGVO? What must be taken into account when revoking consent?
Read more

Million Euro fine against Deutsche Wohnen

On 05.11.2019, the Berlin data protection authority imposed a fine in an unprecedented amount. Deutsche Wohnen is to pay 14.5 million euros.
Read more

Fine imposed on Romanian company Artmark Holding SRL

The reason was the transmission of advertising messages by e-mail without the express and unambiguous consent of the persons concerned.
Read more

Polish fine public body

40,000 zloty against the Mayor of the City of Aleksandrów Kujawski. A reduction of the fine is not possible due to bad cooperation.
Read more

Fines against Raiffeisen Bank and Vreau Credit

The two organisations checked the creditworthiness of individuals. Personal information was exchanged using WhatApp.
Read more

Fines against Elefant Online

Fines for Elefant Online SA for e-mail communication that does not comply with DSGVO. What specific infringements caused the fine?
Read more

Romanian fine Inteligo Media

Fines for Inteligo Media SA due to e-mail communication not conforming to DSGVO. What specific infringements caused the fine?
Read more

Controllers for processing according to GDPR

The role of the person responsible is precisely defined in the DSGVO. Find out in the article which tasks and duties the responsible person has.
Read more

18 million fine imposed on Österreichische Post AG

What specific infringements of the DSGVO are ÖPAG accused of? You will find all information in the article. Read now and learn from the mistakes of others.
Read more

Data breach at UniCredit

The Italian bank UniCredit is the victim of a hacker attack. Around three million names, e-mail addresses and telephone numbers were captured.
Read more

Data breach at Adobe

Due to a security vulnerability, 7.5 million data of users of the Creative Cloud were publicly accessible. Read what you should be aware of now.
Read more

DSK data protection fine concept

The German fine model is intended to ensure greater transparency as well as systematic and comprehensible calculation of fines.
Read more

Data breach at Mercedes Benz

Several customers of the application Mercedes-Me got temporarily the data of other users displayed. Only customers from the USA were affected.
Read more

30.000 Euro fine for defective cookie banner

Shortly after the ruling of the European Court of Justice, the Spanish regulatory authority imposed the first fine on the airline Vueling.
Read more

Data breach and fine for Greek company

The Greek data protection authority has imposed a fine of EUR 200 000 on the telecommunications operator OTE.
Read more

Data breach at the city council of Magdeburg

The cause is the failure of computer programs. No personal data has been passed on to third parties, the data protection commissioner of the state of Saxony-Anhalt has been informed.
Read more

ECJ ruling on data protection and cookies

Judgement of the European Court of Justice strengthens consumer rights: Cookies only with voluntary active consent.
Read more

Data breach at Deutsche Bahn

In front of the Düsseldorf airport train station several boxes of files were found, which contained data of employees and passengers.
Read more

The new Federal Data Protection Act

All information on the Federal Data Protection Act (BDSG-neu) and the differences to the General Data Protection Regulation (DSGVO).
Read more

Data Protection Officer

When do companies have to appoint a data protection officer? Learn about the tasks and position of a data protection officer.
Read more

Microsoft Office 365 data protection under criticism

Microsoft Office 365 is questionable from a data protection perspective. Recently, its use in schools has been under criticism. What you need to consider when using it to avoid high data protection risks can be found in the article.
Read more

Data breach: police headquarters Neubrandenburg

Police officer confuses e-mail address with press distribution list and sends to 158 media representatives at the request of a private individual.
Read more

Data breach in Ecuador

Personal data of 17 million people from Ecuador published online on servers of Elasticsearch Also included was information about Wikileaks founder Julian Assange.
Read more

Data breach: health data

Highly sensitive medical data stored worldwide on servers without password protection The approximately 16 million data records come from 50 countries worldwide. In Germany, 13,000 patients are affected.
Read more

Data range Facebook phone numbers

Around 420 million data records, including telephone numbers of Facebook users, primarily from the USA, Great Britain and Vietnam, were freely accessible on the Internet.
Read more

Apple IPhone data failure

Apple's IPhones could apparently be spied on for more than 2 years. For example, a woman claiming to be Chinese spyware...
Read more

Swiss health insurance company sends statements incorrectly

Once again, CSS billing data has been sent to the wrong customers via the online portal of the Swiss health insurance company.
Read more

Data failure Bavarian Red Cross

The State Office for Data Protection Supervision has started investigations against the BRK regarding a possible transfer of health data to Facebook.
Read more

Data breakdown school Sweden

The Swedish Data Protection Agency imposes its first fine for GDPR violation on a school in Skelleftea.
Read more

Data breach Mastercard

Data such as mobile phone numbers, addresses and birthdays of almost 90,000 customers of the bonus program Priceless Specials have appeared on the Internet.
Read more

Data protection breakdown affects police officers

Data breakdown at the police in Thuringia. In the Unstrut-Hainich office, personal data of 134 police officers were transmitted unencrypted.
Read more

Ban on photography in schools not due to GDPR

The ban on photography in public institutions is not a consequence of the basic data protection regulation. Uncontrolled publication is a cause for concern.
Read more

Anonymised Internet data is often not secure

The Federal Data Protection Commissioner calls for more reliability and clarity with regard to anonymised Internet data. Learn more.
Read more

Data breach Biometric data

Serious data breach at Suprema, the Korean security solutions manufacturer. Fingerprint and facial recognition data was publicly available.
Read more

Plauen District Office Office Protection of the Constitution

Personal data of citizens who registered for meetings were reported. A violation of data protection and freedom of assembly.
Read more

Twitter user data advertisers

Information on the country code and whether and when ads were viewed was passed on. According to Twitter, the data mishap was fixed on 05.08.2019.
Read more

Datenpanne Spielemesse E3

The list contained 2000 records of trade visitors. Journalist Sophia Narwitz drew attention to the data discrepancy in a YouTube video.
Read more

Apple recordings for map services

Find out when Apple plans to include which regions and what you can do if you don't want your privacy to be affected.
Read more

100 million records stolen from US bank

Most of the data captured by a hacker attack originates from credit card applications and existing credit cards of the bank's customers.
Read more

Fines reach energy sector

Fines imposed by data protection authorities reach the energy sector. The Italian data protection authority imposed a fine of 2 million euros.
Read more
Data Protection Academy Data Protection Press Freedom

Data protection and freedom of the press

In Germany, freedom of the press is regulated by the media privilege. Read more about the rights and duties of journalists in the article.
Read more

Security incident in hospital IT

As a result, data was encrypted by the malware and hospital operations were significantly impaired.
Read more

Facebook fine $5 billion

The unauthorised processing of Facebook user data by Cambridge Analytica resulted in financial fines and structural changes.
Read more

Data breach on Facebook Messenger for kids

Facebook Messenger Kids allows kids to chat with parent-approved users. A technical error made it possible to chat with strangers.
Read more

Data breach at the city of Winsen

For eight months, a list of persons banned from the official building was publicly available on the website.
Read more

Data breach at the Gütersloh Job Center

Data breakdown at the Gütersloh Job Center: unshredded files were disposed of in blue paper bins and were accessible to everyone.
Read more

Massive data breach at the Russian secret service

Data leak at the Russian secret service FSB: Hackers are said to have stolen data on current projects and operations from the Moscow spy agency.
Read more

Data leak at petition platform WeAct

According to the operator of a petition platform Campact, lists of signatories were publicly accessible due to a technical error.
Read more

Dutch fine against hospital

The Dutch supervisory authority imposed a fine on Haga Hospital for insufficient security of patient records.
Read more

Data breach at LKA Lower Saxony

Already on 08.05.2019, a briefcase containing highly sensitive information is said to have been stolen from a private car by an official of the LKA.
Read more

110 million Euro fine for Marriott hotel chain

At the end of 2018 a hacker attack on the hotel chain became known. Presumably 339 million customer data were compromised.
Read more

15.000€ for hotel because of photographed breakfast list

15,000 euros for a hotel in Romania because a third party photographed and published online a list with data of 46 hotel guests.
Read more

DSGVO Fine British Airways

200 million fine for British Airways: the first fine enforced in the United Kingdom is surprisingly high, the airline announced an appeal
Read more

Data Protection Breaches

When is an incident reportable? How can the risk be reduced? How to report data breaches correctly in accordance with the GDPR.
Read more

25,000 patient files found in empty building

25,000 patient files found in a vacant clinic building.
Read more

Fines enforced to date by supervisory authorities

These fines were enforced by regulatory authorities. Learn what went wrong and what you can do better yourself.
Read more

Google stores location data of Android users

Google stores location data of Android users - even if you have to assume that this is not actually done.
Read more
Quotations Digitization

Collection #1 Hack - What you have to do now

773 million e-mail addresses and 21 million different passwords for online services used worldwide have been discovered in underground forums in the Dark Net these days. According to experts, the list of stolen user information is structured in such a way that it is ideally suited for the implementation of the hacker attack "Credential Stuffing" (filling in login data).
Read more

Customer data visible at Amazon

Amazon makes email addresses in Europe and the USA visible.
Read more

Salary data of a social club published

Authority loses social data of an association. Personal information accessible via the Internet should be placed securely online.
Read more

Data breach at the FDP Saxony

Party sends false member data.
Read more

General Data Protection Regulation EU-GDPR

Content and application of the EU Data Protection Regulation: Basic principles, data subject rights, obligations for companies.
Read more
Quotations Digitization

Quotes on digitalisation, data protection and IT security

What do people of influence say about data protection, the commercial use of our data and emerging technologies of digitalisation?
Read more
Caroline Schwabe
Latest posts by Caroline Schwabe (see all)