Legal Person
€2,000
Insufficient legal basis for data processing
Decision Date
October 4, 2019
Authority
Czech Data Protection Auhtority (UOOU)
CZ
Sector
Not assigned
Country
CZ
Law
GDPRStatus
FINALDescription
The Czech DPA has imposed a fine of EUR 2,000 on a legal person. The accused circumvented the law when, instead of providing social services with proper authorization, it did so without it in the context of providing accommodation and health-care services. Consequently, it lacked sufficient legal basis to process personal data.
Legal Citations
Art. 5 (1)Art. 12 (1)Art. 30
Issues & Violations
Insufficient legal basis for data processing