Companies can expect fines for data protection violations even without an identifiable culprit or breach of supervision. It is sufficient if the company should have recognized that the data processing was unlawful.

Dr. Philip Uecker discusses the consequences of the latest court rulings in the article “Data protection: companies face fines even for breaches by “unknown persons””, published on “Markt und Mittelstand”.