Pere Sihtkapital SA
€30,000
Insufficient technical and organisational measures to ensure information security
Decision Date
July 15, 2024
Authority
Estonian Data Protection Authority (AKI)
EE
Sector
Not assigned
Country
EE
Law
GDPRStatus
FINALDescription
The Estonian DPA imposed a fine of EUR 30,000 on Pere Sihtkapital SA. The controller conducted a survey on childless families. In the process, the controller failed to take all the necessary technical and organizational measures to ensure the required level of data protection. Pere Sihtkapital SA appealed against the decision. The outcome and status of the appeal are unknown.
Issues & Violations
Insufficient technical and organisational measures to ensure information security