[Personal Information] Understanding Personal Information Protection Regulations through GDPR Fine Cases

Recently, actual fine imposition cases have emerged after the GDPR came into effect, and we will look into the GDPR, which Korean hospitals & clinics, organizations, and app service providers that process personal information of European residents should pay attention to, based on these fine imposition cases.

The first GDPR fine imposition case is 400,000 euros (approximately 500 million won) imposed on B Hospital in Portugal. Portugal's Comissão Nacional de Protecção de Dados (hereinafter CNPD) imposed a fine on B Hospital for two reasons.

The second GDPR fine imposition case is 20,000 euros imposed on K Company, one of the German chat applications (approximately 25 million won). Germany's Baden-Württemberg data protection authority imposed a fine of 20,000 euros for a personal information leak accident due to K Company’s hacking, and it is known that a lower fine was imposed considering that K Company promptly notified the authority of the hacking incident and showed a proactive willingness to improve subsequent measures.

Please check the official blog of Law firm Veat ( GDPR Fine Cases and Personal Information Protection Regulations ) for more details.

Thank you.

Law firm Veat