Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
결정 날짜
2025년 6월 24일
권한
Information Commissioner (ICO)
GB
섹터
Individuals and Private Associations
국가
GB
법률
GDPR상태
FINAL설명
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
법적 인용
Art. 5 (1)Art. 32 (1)Art. 33
문제 및 위반 사항
Insufficient technical and organisational measures to ensure information security