German DPA Fines Data Controller for Inadequate Data Processing Agreement
Hunton Privacy
SEPTEMBER 17, 2015
On August 20, 2015, the Bavarian Data Protection Authority (“DPA”) issued a press release stating that it imposed a significant fine on a data controller for failing to adequately specify the security controls protecting personal data in a data processing agreement with a data processor. The DPA stated in the press release that the data processing agreement did not contain sufficient information regarding the technical and organizational measures to protect the personal data.
Let's personalize your content