Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Denmark: Datatilsynet fines Vejen Municipality DKK 200,000 for lack of encryption
On August 14, 2024, the Danish data protection authority (Datatilsynet) announced its decision in which it imposed a fine of DKK 200,000 (approx. $29,514) on the Municipality of Vejen following a breach of personal data security.
Background to the decision
According to the Datatilsynet, the Municipality reported a breach of personal data security because five laptops had been stolen and none of the computers were encrypted. In its investigation, the Datatilsynet noted that there were up to 300 computers in the Municipality which risked being used in the same way, and which were also not encrypted.
Findings
The Datatilsynet stated that encryption is a very basic security measure that is relatively easy and not very costly to implement. It encouraged all Municipalities to take a thorough look at their portable devices and get them encrypted.
Outcomes
In light of the above, the Datatilsynet imposed a fine of DKK 200,000 (approx. $29,514) on the Municipality of Vejen.
You can read the decision, only available in Danish, here.