In 2008 the DDPA carried out a dawn raid at Tredin, an occupational health and safety service. The DDPA determined that Tredin processed personal data in violation of the APPD by providing more personal data to the employer than necessary for reintegration in the workforce and without permission of the employee11. The DDPA published the outcome of its dawn raid and drew media attention to the report. Furthermore, the DDPA imposed an order subject to a penalty for non-compliance up to a maximum of EUR 120,000. The DDPA announced that it will carry out more dawn raids.