Only, but still: “Knud­dels” pays tole­ra­ble DSGVO fine

How the FAZ reports, the data pro­tec­tion com­mis­sio­ner of Baden-Würt­tem­berg has filed a com­plaint against the social net­work “Knud­dels” based on the GDPR a fine in the amount of EUR 20,000 imposed.

Knud­dels was a vic­tim of theft of per­so­nal data, inclu­ding pass­words and email addres­ses, and the net­work had stored the pass­words unen­crypt­ed for a long time (more than 10 years), which was a breach of data secu­ri­ty and thus the GDPR means. The penal­ty appears in view of the upper limit of the fine of EUR 20 mil­li­on rela­tively mild, which FAZ – citing Knud­dels’ att­or­ney, Tim Wyti­bul (now of Lat­ham & Wat­kins) – attri­bu­ted to the fact that Knud­dels coope­ra­ted ful­ly with the aut­ho­ri­ties and that it was important to the agen­cy to reward coope­ra­ti­ve behavior.