Germany

Company

496,000 €

GDPR enforcement action by Data Protection Authority of Hessen on 2024.

Rank · Sector

#43

of 322 in Finance, Insurance and Consulting

Rank · Germany

#17

of 116

Rank · All fines

#251

of 3,050

Case details

Authority: Data Protection Authority of Hessen
Date: 2024
Controller / Processor: Company
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 (3) GDPR, Art. 15 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The DPA of Hessen has imposed a fine of EUR 496,000 on a company. The DPA identified several GDPR violations, including transmitting customer data to the incorrect recipient and making marketing phone calls without a legal basis. The company was cooperative, a factor that the DPA considered when determining the total fine amount.

Open original source Links to the regulator's original publication or another source.