Germany

Company

—

GDPR enforcement action by Data Protection Authority of Niedersachsen on 2021.

Case details

Authority: Data Protection Authority of Niedersachsen
Date: 2021
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 25 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

A company had stored telecommunications hardware, a server and backup technology in a guest bathroom. The server cabinet, which did not have an intact lock, also served as a changing table.

Open original source Links to the regulator's original publication or another source.