Editing Datatilsynet (Denmark) - Datatilsynet - Vejle Kommune indstilles til bøde

From GDPRhub

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.

Latest revision Your text
Line 50: Line 50:
 
}}
 
}}
  
The Danish DPA (Datatilsynet) reported the Vejle Municipality (Vejle Kommune) to the police for the failure to implement appropriate security measures and proposed a fine of approximately €26,900 (DKK 200,000).
+
The Danish DPA (Datatilsynet) has reported Vejle Municipality (Vejle Kommune) to the police for the failure to implement appropriate security measures and proposed a fine of DKK 200,000 (approximately €26,900).  
  
 
== English Summary ==
 
== English Summary ==
Line 59: Line 59:
 
Thereby, the DPA found that the municipality dental care used an automatic process to send welcome letters to custodians that contain addresses of both parents. The DPA concluded that the municipality failed to assess on case-by-case basis whether only the necessary information included in the letters and whether the personal data may be disclosed to the other parent. Thus, in several cases a parent received information about the other parent and/or child address, even though their name and address have been protected.   
 
Thereby, the DPA found that the municipality dental care used an automatic process to send welcome letters to custodians that contain addresses of both parents. The DPA concluded that the municipality failed to assess on case-by-case basis whether only the necessary information included in the letters and whether the personal data may be disclosed to the other parent. Thus, in several cases a parent received information about the other parent and/or child address, even though their name and address have been protected.   
  
On 16 June 2021 the DPA has published a press release to announce that the Vejle Municipality has been reported to the police and a fine of DKK 200,000 has been proposed.
+
On 16 June 2021 the DPA has published a press release to inform that Vejle Municipality has been reported to the police and a fine of DKK 200,000 has been proposed.
 
=== Holding ===
 
=== Holding ===
The Danish DPA chose to report Vejle Municipality to the police for breach of the GDPR, namely, the failure to implement appropriate security measures when processing personal data of patients and recommended a fine of DKK 200,000.
+
The Danish DPA has chosen to report Vejle Municipality to the police for breach of the GDPR, namely, the failure to implement appropriate security measures when processing personal data of patients and recommended a fine of DKK 200,000.
  
 
The municipality failed to assess whether it is at all necessary for the information to appear in the letters.  
 
The municipality failed to assess whether it is at all necessary for the information to appear in the letters.  
Line 67: Line 67:
 
In determining the amount of the fine, the DPA considered inter alia the following aspects:
 
In determining the amount of the fine, the DPA considered inter alia the following aspects:
  
* the nature and seriousness of the infringement
+
* nature and seriousness of the infringement
* the GDPR's requirement that a fine in each individual case must be effective, proportionate to the infringement, and have a deterrent effect
+
* the GDPR's requirement that a fine in each individual case must be effective, proportionate to the infringement and have a deterrent effect
* the size of the municipality in terms of population and the total operating license
+
* size of the municipality in terms of population and the total operating license
  
 
== Comment ==
 
== Comment ==

Please note that all contributions to GDPRhub are considered to be released under the Creative Commons Attribution-NonCommercial-ShareAlike (see GDPRhub:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To edit this page, please answer the question that appears below (more info):

Cancel Editing help (opens in new window)

Template used on this page: