Germany

Operator of a dating platform

—

GDPR enforcement action by Data Protection Authority of Bremen on 2023.

Case details

Authority: Data Protection Authority of Bremen
Date: 2023
Controller / Processor: Operator of a dating platform
Sector: Not assigned
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The DPA of Bremen has imposed a fine on the operator of an online dating platform. The controller had not provided an email verification procedure for registration on its dating platform. This resulted in a third party being able to register on the portal using the email address of the data subject.

Open original source Links to the regulator's original publication or another source.