Denmark’s data protection authority, Datatilsynet, fined the Region of Southern Denmark DKK 500,000 for failing to take sufficient security measures to ensure personal information was not inadvertently published on its website. A March 2020 data breach report claimed a PowerPoint presentation shared on the region’s website included health and Social Security number information of 3,915 individuals. The DPA said as the region processes large amounts of sensitive data it has a “stricter obligation” to protect it from “unintentional publication or disclosure.”
Full Story