Private individual
€600
Insufficient legal basis for data processing
Datum der Entscheidung
5. August 2021
Behörde
Austrian Data Protection Authority (dsb)
AT
Sektor
Individuals and Private Associations
Land
ES
Recht
GDPRStatus
FINALBeschreibung
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Juristische Zitate
Art. 9
Probleme und Verstöße
Insufficient legal basis for data processing