Unknown
€294,000
Non-compliance with general data processing principles
Decision Date
January 1, 2019
Authority
Data Protection Authority of Niedersachsen
DE
Sector
Not assigned
Country
CZ
Law
GDPRStatus
FINALDescription
A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.
Legal Citations
Art. 5
Issues & Violations
Non-compliance with general data processing principles