Private individual
€600
Insufficient legal basis for data processing
Decision Date
August 5, 2021
Authority
Austrian Data Protection Authority (dsb)
AT
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Legal Citations
Art. 9
Issues & Violations
Insufficient legal basis for data processing