Details:

Summary The company had not appointed a Data Protection Officer (‘DPO’) to whom requests from data subjects could be addressed, and the company’s website did not contain information about an appointed DPO.
Link: link
Related articles:  Art. 37 GDPR
Type: Insufficient involvement of data protection officer
Fine: EUR 25,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law