Gladsaxe Municipality
€14,000
Insufficient technical and organisational measures to ensure information security
Decision Date
March 10, 2020
Authority
Danish Data Protection Authority (Datatilsynet)
DK
Sector
Public Sector and Education
Country
DK
Law
GDPRStatus
FINALDescription
A computer, containing personal data that was not protected by encryption, has been stolen, including sensitive information and personal identification numbers of 20,620 city residents.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security