ARTICLE · 20 SEPTEMBER 2019

‘Mega-Fines' And Compensation – How Might Companies Be Affected? Developments In Data Protection Law September 2019

Herbert Smith Freehills Kramer LLP

In this update, we provide you with a brief summary of two recent developments in relation to sanctions imposed under the General Data Protection Regulation ("GDPR").

GermanyPrivacy

Simone Ziegler

Anna Roson Eichelmann

In this update, we provide you with a brief summary of two recent developments in relation to sanctions imposed under the General Data Protection Regulation ("GDPR").

Firstly, the Berlin Data Protection Authority ("Berlin DPA") recently announced its willingness to impose multimillion-euro fines for breaches of the GDPR. This shows that also in Germany significant fines can no longer be ruled out. It appears that Berlin DPA is following in the footsteps of the French Data Protection Authority ("CNIL") and the UK Information Commissioner's Office ("ICO") which have both previously imposed fines in the millions.
Secondly, for the first time a court has awarded immaterial damages compensation for a GDPR breach in Austria.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

‘Mega-Fines' And Compensation – How Might Companies Be Affected? Developments In Data Protection Law September 2019

Related Articles

Do We Have An Expectation Of Privacy In Public? AI Glasses May Change The Answer

Workplace Investigations Versus Privacy: Why Investigation Data Does Not Automatically Belong In Personnel Files

Avoiding Unauthorized Display Of Sensitive Personal Data (Such As A User's Facial Image) During A Payment Authentication Process: Non-technical

EuGH: Erster Antrag auf Auskunftserteilung kann nach DSGVO als missbräuchlich abgelehnt werden

CJEU: First Request For Access May Be Rejected As Abusive Under GDPR

Read more about

Related Comparative Guides

Data Protection & Cybersecurity

See more popular content from

Data Protection Authority Issues First German Fine Under GDPR

Action Required For Providers Of Connected Devices: Challenges Under The EU Data Act

EU Proposes Sweeping Reforms To The GDPR, Cookie Rules, Data Act, And Breach Reporting

CJEU: First Request For Access May Be Rejected As Abusive Under GDPR

Germany To Expand Consumer Associations' Right To Sue Companies For Breach Of Data Protection Laws

CJEU's Russmedia Decision Expands Platform Controller Duties Under GDPR

GDPR Representatives In The EU And The UK After Brexit

Windows Pain? German Report Casts Doubt On Microsoft GDPR Compliance

Decision By German Higher Regional Court Koblenz: Consent For Publication Of Interview Not Revocable

GDPR Fine For Failure To Appoint An EU Representative