GDPR enforcement actions: UK and Germany

Two recent enforcement actions shed light on how regulators will enforce GDPR provisions going forward. In one case, the United Kingdom’s Information Commissioner’s Office fined a company GBP 275,000 for storing sensitive data in crates on its premises. The crates were not secured and violated the GDPR’s requirement for technical and organizational measures to prevent unauthorized access to personal data.

This document is only available to subscribers. Please log in or purchase access.
 


Would you like to read this entire article?

If you already subscribe to this publication, just log in. If not, let us send you an email with a link that will allow you to read the entire article for free. Just complete the following form.

* required field