Germany

Facebook Germany GmbH

51,000 €

GDPR enforcement action by Data Protection Authority of Hamburg on 2019.

Rank · Sector

#187

of 369 in Media, Telecoms and Broadcasting

Rank · Germany

#39

of 116

Rank · All fines

#685

of 3,050

Case details

Authority: Data Protection Authority of Hamburg
Date: 2019
Controller / Processor: Facebook Germany GmbH
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 37 GDPR
Type of violation: Insufficient involvement of data protection officer

Summary

Whereas Facebook Ireland had appointed a data proteciton officer for all group companies located in the EU, this appontment was not notfied to the DPA Hamburg, competent for Facebook Germany GmbH. The fine was calculated on the basis of the turnover of the German branch (EUR 35 million). Relevant factors for the calculation were i.a. that the omitted notification was immediately made up for, Facebook acted negligently and did not violate the duty to appoint a data protection officer but only the notification obligation.

Open original source Links to the regulator's original publication or another source.