The Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragter für Datenschutz und Informationsfreiheit) has fined Deutsche Wohnen for alleged GDPR breaches of the company's data archiving solution. The fine amounts to roughly EUR 14.5m. Deutsche Wohnen is contesting the fine according to information published by the company.

The fine follows the publication of a new calculation method for GDPR fines by the German data protection regulators in October 2019. It is a clear warning that regulators intend to enforce GDPR compliance and sanction breaches more strictly. 

From an insurance perspective, the new general approach and practice underline the significance of cyber insurance and of the still unanswered question of insurability of such fines on the one hand, while stressing the need for a clear risk understanding, a sound data protection compliance and preventive measures on the other hand. To be continued...