Germany

Freelancer

16,000 €

GDPR enforcement action by Data Protection Authority of Hessen on 2024.

Rank · Sector

#39

of 218 in Not assigned

Rank · Germany

#59

of 116

Rank · All fines

#1,154

of 3,042

Case details

Authority: Data Protection Authority of Hessen
Date: 2024
Controller / Processor: Freelancer
Sector: Not assigned
Quoted Articles: Art. 13 GDPR, Art. 31 GDPR, Art. 58 (2) d) GDPR
Type of violation: Insufficient cooperation with supervisory authority

Summary

The DPA of Hessen has imposed a fine of EUR 16,000 on a freelancer. The controller operates a website without a privacy policy. The DPA contacted the controller, ordering him to include a privacy policy on his website, and announced that he would be fined EUR 2,000 if he did not comply. The controller ignored the order, resulting in the DPA ordering him a second and third time to include a privacy policy on his website. The controller continued to ignore the DPA's orders. Therefore, the DPA imposed a total fine of EUR 16,000. This fine consists of EUR 10,000 for ignoring the DPA's orders and EUR 2,000 for each of the three ignored orders to include a privacy policy on the controller's website.

Open original source Links to the regulator's original publication or another source.