Denmark

Lejre Municipality

6,700 €

GDPR enforcement action by Danish Data Protection Authority (Datatilsynet) on 2020-06-30.

Rank · Sector

#205

of 357 in Public Sector and Education

Rank · Denmark

#25

of 29

Rank · All fines

#1,579

of 3,050

Case details

Authority: Danish Data Protection Authority (Datatilsynet)
Date: 2020-06-30
Controller / Processor: Lejre Municipality
Sector: Public Sector and Education
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 33 GDPR, Art. 34 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The data protection authority had found that the Lejre Municipal Child and Youth Centre had regularly uploaded minutes of meetings with particularly sensitive and sensitive personal data, including on citizens under 18 years of age, to the Lejre Municipal Personnel Portal, which was accessible to employees of the Lejre Municipality, regardless of whether the employees in question were working with these cases. In addition, the data protection authority denied the failure to comply with the obligation to inform the persons concerned of the data breach.

Open original source Links to the regulator's original publication or another source.