Lars Lensdorf and Ulrike Elteste of Covington & Burling write:
On October 30, 2019, the supervisory authority (“SA”) of Berlin issued a € 14.5 million fine against the real estate company Deutsche Wohnen SE for storing personal data of tenants without a legal basis (Art. 6 GDPR) and for not implementing the GDPR principle of privacy by design (Art. 5 and 25(1) GDPR) (press release here in German). It is the highest GDPR fine imposed so far in Germany.
Deutsche Wohnen SE owns 100,000 rental apartments in Berlin.
Read more on InsidePrivacy.