Municipality of Vejen
€26,800
Insufficient technical and organisational measures to ensure information security
Decision Date
14 de agosto de 2024
Authority
Danish Data Protection Authority (Datatilsynet)
DK
Sector
Public Sector and Education
Country
DK
Law
GDPRStatus
FINALDescription
The Danish DPA has imposed a fine of EUR 26,800 on the municipality of Vejen. The municipality had suffered a security incident involving the theft of three unencrypted computers containing information about children. During its investigation, the DPA found that 300 other computers were not encrypted either.
Issues & Violations
Insufficient technical and organisational measures to ensure information security