Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Päätöspäivä
24. kesäkuuta 2025
Viranomainen
Information Commissioner (ICO)
GB
Ala
Individuals and Private Associations
Maa
GB
Laki
GDPRTila
FINALKuvaus
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Oikeudelliset viittaukset
Art. 5 (1)Art. 32 (1)Art. 33
Asiat ja rikkomukset
Insufficient technical and organisational measures to ensure information security