Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
Data da decisão
24 de junho de 2025
Autoridade
Information Commissioner (ICO)
GB
Setor
Individuals and Private Associations
País
GB
Lei
GDPRStatus
FINALDescrição
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
Citações legais
Art. 5 (1)Art. 32 (1)Art. 33
Problemas e violações
Insufficient technical and organisational measures to ensure information security