Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Data della decisione
24 giugno 2025
Autorità
Information Commissioner (ICO)
GB
Settore
Individuals and Private Associations
Paese
GB
Legge
GDPRStato
FINALDescrizione
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Citazioni legali
Art. 5 (1)Art. 32 (1)Art. 33
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security