Denmark

Gladsaxe Municipality

14,000 €

GDPR enforcement action by Danish Data Protection Authority (Datatilsynet) on 2020-03-10.

Rank · Sector

#154

of 357 in Public Sector and Education

Rank · Denmark

#18

of 29

Rank · All fines

#1,232

of 3,050

Case details

Authority: Danish Data Protection Authority (Datatilsynet)
Date: 2020-03-10
Controller / Processor: Gladsaxe Municipality
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

A computer, containing personal data that was not protected by encryption, has been stolen, including sensitive information and personal identification numbers of 20,620 city residents.

Open original source Links to the regulator's original publication or another source.