Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
24 de junio de 2025
Autoridad
Information Commissioner (ICO)
GB
Sector
Individuals and Private Associations
País
GB
Ley
GDPREstado
FINALDescripción
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Citas legales
Art. 5 (1)Art. 32 (1)Art. 33
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security