Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Date de décision
24 juin 2025
Autorité
Information Commissioner (ICO)
GB
Secteur
Individuals and Private Associations
Pays
GB
Droit
GDPRStatut
FINALDescription
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Citations légales
Art. 5 (1)Art. 32 (1)Art. 33
Questions et violations
Insufficient technical and organisational measures to ensure information security