PrivatBo A.M.B.A.
€20,100
Insufficient technical and organisational measures to ensure information security
Decision Date
August 4, 2020
Authority
Danish Data Protection Authority (Datatilsynet)
DK
Sector
Real Estate
Country
DK
Law
GDPRStatus
FINALDescription
The company had distributed USB sticks to tenants in the context of a sale of real estate, which contained not only non-personal information on the real estate objects in question but also personal data of other persons such as lease agreements and other documents containing confidential personal data.
Legal Citations
Art. 5Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security