Penalty for late notification of a data breach
The activity report of the Hamburg State Data Protection Commissioner mentions a fine of € 20,000 because a company reported a data protection breach late and did not inform the data subjects of this fact. No further information is known.
Entscheidungsdatum:
01.02.2019
Land:
Germany
Art des Verstoßes:
violated duty to inform
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 20,000,-
Violation of GDPR Paragraph:
33. Notification of a personal data breach to the supervisory authority
34. Communication of a personal data breach to the data subject
Quelle:
Activity Report of the Hamburg State Data Protection Commissioner