CDON AB

€25,000

Insufficient technical and organisational measures to ensure information security

Ngày ra quyết định

30 tháng 6, 2023

Thẩm quyền

Data Protection Authority of Sweden

SE

Ngành

Industry and Commerce

Quốc gia

SE

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Swedish DPA has imposed a fine of EUR 25,000 on CDON AB. The Austrian organization None of your Business (NOYB) had filed a complaint against the company in light of the Schrems II judgment, stating that the company was unlawfully transferring personal data to the US. The company had used Google Analytics for visitor statistics and based the data processing by the statistics tool on the EU standard contractual clauses in the absence of an EU Commission adequacy decision for the USA. In the course of its investigation, the DPA determined that the use of the standard contractual clauses was not sufficient to guarantee a level of protection equivalent to that of the EU.

Trích dẫn pháp lý

Art. 44

Vấn đề & Vi phạm

Insufficient technical and organisational measures to ensure information security

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.