Sanction RGPD Data Protection Authority of Hessen — Company : 496 k€ (2024)
- Autorité de contrôle
- Data Protection Authority of Hessen
- Pays
- Allemagne
- Entreprise / secteur
- Company
- Montant de l'amende
- 496 k€
- Date de la décision
- 1 janvier 2024
- Fondement juridique
- Art. 5, Art. 6, Art. 12 (3), Art. 15
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The DPA of Hessen has imposed a fine of EUR 496,000 on a company. The DPA identified several GDPR violations, including transmitting customer data to the incorrect recipient and making marketing phone calls without a legal basis. The company was cooperative, a factor that the DPA considered when determining the total fine amount.