{"id":2061,"date":"2022-08-24T15:06:58","date_gmt":"2022-08-24T13:06:58","guid":{"rendered":"https:\/\/www.privacy-advice.com\/aktuelles\/dsgvo-violation-11-to-pay-million-euro-fine\/"},"modified":"2022-09-20T08:00:05","modified_gmt":"2022-09-20T06:00:05","slug":"dsgvo-violation-11-to-pay-million-euro-fine","status":"publish","type":"aktuelles","link":"https:\/\/www.privacy-advice.com\/en\/news\/dsgvo-violation-11-to-pay-million-euro-fine\/","title":{"rendered":"DSGVO violation: 1&1 to pay million euro fine"},"content":{"rendered":"
\n

The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has fined telecommunications service provider 1&1 Telecom GmbH EUR 9,550,000.<\/p>\n<\/div>

\n

1&1 Telecom GmbH offers customer support by telephone for its customers. In this process, the customer is first identified in order to then process the request using the available customer information. However, this procedure reveals security risks, as insufficient precautions are taken to uniquely identify the customer.<\/p>\n<\/div>

\n

In the present case, the former life partner had stated that he was acting on behalf of the customer and provided the authentication data known to him. For example, it was sufficient to provide the name and date of birth in order to obtain far-reaching information on further personal data of the customer.<\/p>\n<\/div>

\n

The previous authentication procedure thus made it comparatively easy for unauthorized persons to obtain information about customer data. 1&1 Telecom GmbH therefore violated Article 32 of the GDPR. According to this, companies must take appropriate technical and organizational measures to systematically protect the processing of personal data.<\/p>\n<\/div>

\n

In the meantime, after intensive cooperation with the authority, a new authentication procedure has been introduced that has been significantly improved in terms of technology and data protection. Consequently, it should be noted that the amount of the fine could have been even higher according to the new calculation of a fine.<\/p>\n<\/div>

\n

For queries regarding the implementation of appropriate technical and organizational measures in accordance with Art. 32 DSGVO, please contact Dr. Stefan Drewes<\/a> at 0228-90248070 or by email at drewes@privacy-advice.com.<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has fined telecommunications service provider 1&1 Telecom GmbH EUR 9,550,000. 1&1 Telecom GmbH offers customer support by telephone for its customers. In this process, the customer is first identified in order to then process the request using the available customer information. However, this […]<\/p>\n","protected":false},"parent":0,"template":"","class_list":["post-2061","aktuelles","type-aktuelles","status-publish","hentry"],"yoast_head":"\nDSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice\" \/>\n<meta property=\"og:description\" content=\"The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has fined telecommunications service provider 1&1 Telecom GmbH EUR 9,550,000. 1&1 Telecom GmbH offers customer support by telephone for its customers. In this process, the customer is first identified in order to then process the request using the available customer information. However, this […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/\" \/>\n<meta property=\"og:site_name\" content=\"DPA Drewes Privacy Advice\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-20T06:00:05+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\\\/\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\\\/\",\"name\":\"DSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#website\"},\"datePublished\":\"2022-08-24T13:06:58+00:00\",\"dateModified\":\"2022-09-20T06:00:05+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/news\\\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.privacy-advice.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\\\/\\\/www.privacy-advice.com\\\/en\\\/news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DSGVO violation: 1&1 to pay million euro fine\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#website\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/\",\"name\":\"DPA Drewes Privacy Advice\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#organization\",\"name\":\"DPA Drewes Privacy Advice GmbH\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.privacy-advice.com\\\/wp-content\\\/uploads\\\/dpa-logo.svg\",\"contentUrl\":\"https:\\\/\\\/www.privacy-advice.com\\\/wp-content\\\/uploads\\\/dpa-logo.svg\",\"width\":1,\"height\":1,\"caption\":\"DPA Drewes Privacy Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/www.privacy-advice.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/","og_locale":"en_US","og_type":"article","og_title":"DSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice","og_description":"The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) has fined telecommunications service provider 1&1 Telecom GmbH EUR 9,550,000. 1&1 Telecom GmbH offers customer support by telephone for its customers. In this process, the customer is first identified in order to then process the request using the available customer information. However, this […]","og_url":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/","og_site_name":"DPA Drewes Privacy Advice","article_modified_time":"2022-09-20T06:00:05+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/","url":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/","name":"DSGVO violation: 1&1 to pay million euro fine – DPA Drewes Privacy Advice","isPartOf":{"@id":"https:\/\/www.privacy-advice.com\/de\/#website"},"datePublished":"2022-08-24T13:06:58+00:00","dateModified":"2022-09-20T06:00:05+00:00","breadcrumb":{"@id":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.privacy-advice.com\/de\/news\/dsgvo-verstoss-1und1-soll-millionenstrafe-zahlen\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.privacy-advice.com\/en\/"},{"@type":"ListItem","position":2,"name":"News","item":"https:\/\/www.privacy-advice.com\/en\/news\/"},{"@type":"ListItem","position":3,"name":"DSGVO violation: 1&1 to pay million euro fine"}]},{"@type":"WebSite","@id":"https:\/\/www.privacy-advice.com\/de\/#website","url":"https:\/\/www.privacy-advice.com\/de\/","name":"DPA Drewes Privacy Advice","description":"","publisher":{"@id":"https:\/\/www.privacy-advice.com\/de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.privacy-advice.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.privacy-advice.com\/de\/#organization","name":"DPA Drewes Privacy Advice GmbH","url":"https:\/\/www.privacy-advice.com\/de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.privacy-advice.com\/de\/#\/schema\/logo\/image\/","url":"https:\/\/www.privacy-advice.com\/wp-content\/uploads\/dpa-logo.svg","contentUrl":"https:\/\/www.privacy-advice.com\/wp-content\/uploads\/dpa-logo.svg","width":1,"height":1,"caption":"DPA Drewes Privacy Advice GmbH"},"image":{"@id":"https:\/\/www.privacy-advice.com\/de\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles"}],"about":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/types\/aktuelles"}],"version-history":[{"count":3,"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2061\/revisions"}],"predecessor-version":[{"id":2152,"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/aktuelles\/2061\/revisions\/2152"}],"wp:attachment":[{"href":"https:\/\/www.privacy-advice.com\/en\/wp-json\/wp\/v2\/media?parent=2061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}