Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Denmark: Datatilsynet fines Odsherred Municipality DKK 100,000 - DKK 200,000 for data security failures
On January 11, 2024, the Danish data protection authority (Datatilsynet) announced its decision in which it imposed a fine of DKK 100,000 - DKK 200,000 (approx. $14,892 - $29,514) on the Municipality of Odsherred following a breach of personal data security.
Background to the decision
According to the Datatilsynet, the Municipality reported a breach of personal data security because a work laptop containing sensitive personal data, including social security numbers and information about children, had been stolen at an employee's home. In its investigation, the Datatilsynet noted that the laptop had not been encrypted and that for several years the Municipality had not encrypted its laptops.
Findings
The Datatilsynet stated that the lack of encryption was a serious breach of the General Data Protection Regulation (GDPR) requirements for processing security.
Outcomes
In light of the above, the Datatilsynet imposed a fine of DKK 100,000 - DKK 200,000 (approx. $14, 892 - $29,514) on the Municipality of Odsherred.
You can read the decision, only available in Danish, here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
