Fine · Germany
Knuddels: EUR 20,000
- Authority
- State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
- Country
- Germany
- Date
- Decision of 21 November 2018
- Amount
- EUR 20,000, as imposed (not converted)
- Appeal status
- Unknown
- Provisions cited
- Article 32(1)(a)
What the fine was for (summary, not the official text)
First German GDPR fine: a chat platform stored users' passwords in plain text, exposed in a hack of about 330,000 accounts; low amount reflects exemplary cooperation.
Checked against the official source on 28 October 2026.
Only the authority's decision is authoritative. This is reference material, not legal advice.