Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Datum rozhodnutí
24. června 2025
Úřad
Information Commissioner (ICO)
GB
Sektor
Individuals and Private Associations
Země
GB
Právo
GDPRStav
FINALPopis
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Právní citace
Art. 5 (1)Art. 32 (1)Art. 33
Problémy a porušení
Insufficient technical and organisational measures to ensure information security