2,400 local authority workers in a Danish municipality had access to documents containing personal data in 400,000 cases

The Danish Data Protection Agency (DPA) has expressed serious criticism in a case where the Danish Municipality of Kolding, since 2012, has been processing documents containing personal data in about 400,000 cases without taking appropriate technical and organisational measures. The municipality has been using an electronic system for document handling (ESDH) for a number of years. […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Fine in the amount of SEK 200,000 issued for late reporting and notification of data breach

Datainspektionen (the Swedish DPA) has imposed a fine totalling SEK 200,000 (EUR 18,700) on Swedish Statens Servicecenter, which provides administrative assistance to other authorities and services to private individuals at 113 service offices in Sweden. After receiving several reports regarding an error in the payroll management system of Statens Servicecenter resulting in unauthorised access to […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Does Google collect biometric data about children?

An American father of two school children has filed a law suit against Google alleging violation of privacy when collecting voice prints, face scans and other personal data from children.  The father is now demanding compensation and that Google destroys all biometric data already collected from children/students. The father argues that Google is violating the […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Selected GDPR decisions from the month of March – Google imposed with fine of EUR 6.8 million for noncompliance of the right to erasure

The Swedish DPA has issued a fine of SEK 75 million (about EUR 6.8 million) to Google for not complying with regulations under the GDPR on “the right to be forgotten”. For several years, the Swedish DPA has inspected Google, and in 2017 the DPA informed that they had assessed that it apparently was difficult […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Selected GDPR decisions from the month of March – Disclosure of protected addresses subject to severe criticism

BEC, a Danish IT company developing and operating IT systems for financial institutions operating in Denmark, has become subject to severe criticism by the Danish DPA.  In 2019, it was established that in connection with automatic money transfers between financial institutions, personal data were also disclosed, including information on addresses of individuals who in the […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Selected GDPR decisions from the month of March – New guidelines for using cookies and trackers in Greece

Following a review of the use of cookies and trackers on a number of popular Greek websites, the Greek DPA has published new and updated guidelines for using cookies and trackers. Details are available here (in Greek).  It is recommended that users be informed about the use of cookies and trackers by so-called “appropriate mechanisms”, e.g. pop-up […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Selected GDPR decisions from the month of March – Two Danish municipalities facing fines

Two municipalities north of Copenhagen are to expect fines in the amount of DKK 100,000 and DKK 50,000, respectively. The Danish Data Protection Agency became aware of the matters when both municipalities reported data breaches in connection with the theft of computers containing personal data. Neither of the municipalities’ computers was protected with encryption, and […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Henrik Christian Strand of Holst, Advokater comments on selected GDPR decisions from the month of February 2020

Danish Meteorological Institute’s cookie consent subject to criticism                                                                                                  The Danish Data Protection Agency (DPA) has severely criticized Danish provider of weather forecasts and other climatic information, the Danish Meteorological Institute’s (DMI) processing of personal data in connection with displaying banner ads on its website dmi.dk.  Following the filing of the complaint, DMI became aware of […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Holst, Advokater: GDPR Decisions from January 2020

Italian company fined EUR 5 million for telesales without any consent and illegal conclusion of contract  On the basis of complaints from a number of citizens, the Italian Data Protection Agency imposed two fines on Eni Gas e Luce amounting to EUR 8.5 million and EUR 3 million, respectively. The first fine concerned the unlawful […]

Henrik Christian StrandAssociate Partner, Holst, Advokater

Zenith Advisory returns to IR as the exclusive Mergers & Acquisitions Member in Denmark

IR Global, the world’s largest exclusive network of advisory firms is delighted to welcome back Martin Linnemann Larsen of Zenith Advisory. Martin has re-joined IR as our exclusive Mergers & Acquisitions Member in Denmark. Martin is a Managing Partner at Zenith Advisory and has over 15 years experience within investment banking and private equity. Martin previously worked at […]