Birthlink
€20,725
Insufficient technical and organisational measures to ensure information security
決定日期
2025年6月24日
權限
Information Commissioner (ICO)
GB
部門
Individuals and Private Associations
國家
GB
法律
GDPR狀態
FINAL說明
The UK DPA has imposed a fine of £ 18,000 (EUR 20,725) on Birthlink. The controller, a scottish registered charity, failed to implement sufficient technical and organisational measures to ensure data security, resulting in the loss of irreplaceable personal records.
法律引文
Art. 5 (1)Art. 32 (1)Art. 33
問題與違規
Insufficient technical and organisational measures to ensure information security