41 GDPR Fines Issued in Germany

Even though they pale in comparison to the French DPA’s massive fine on Google, the German data protection authorities have been keeping busy with fines of their own.

Since the GDPR has come into force on 25 ay 2018, Germany has issued 41 GDPR related fines. These were levied for various violations, ranging from inadequate technical and organizational security measures to non-compliance with information duties, to sending unauthorized marketing e-mails.

Most fines were imposed by North Rhine-Westphalia (33), followed by Hamburg (3) and Baden-Württemberg and Berlin (2 each) and Saarland (1). The highest fine was €80,000 for an entity that allowed health-related data to be publicly seen, due to inadequate internal control mechanisms. A €20,000 was issued to chat portal Knuddels for a 2018 data breach exposing the passwords, e-mail addresses and nicknames of 330,000 users because they stored said information in plain text on their servers.

Reportedly not all violations were sanctioned with a fine because some authorities granted a grace period, during which fines of much lower amounts than they could/should have been or not issued at all. Though these grace periods and the hesitation of some DPAs to issue fines are still a common occurrence, companies are advised to not rely on this as it’s unclear how long they will last.

10 thoughts on “41 GDPR Fines Issued in Germany

  1. Marceline Suero says:

    Its like you read my mind! You appear to know a lot about this, like you wrote the book in it or something. I think that you could do with a few pics to drive the message home a little bit, but instead of that, this is great blog. A great read. I’ll definitely be back.

  2. Christine says:

    First off I want to say terrific blog! I had a quick question in which I’d like to ask if you don’t mind. I was curious to know how you center yourself and clear your thoughts before writing. I’ve had a difficult time clearing my thoughts in getting my thoughts out. I do take pleasure in writing however it just seems like the first 10 to 15 minutes are lost just trying to figure out how to begin. Any recommendations or hints? Kudos!

Leave a Reply

Your email address will not be published.