Automoción

€800

Insufficient legal basis for data processing

Decision Date

February 3, 2020

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Industry and Commerce

Country

ES

Law

GDPR

Status

FINAL

Description

An employee created a fake profile about a female colleague on an erotic portal, which contained, among other things, her contact details, a photo of her and information about her sexual nature. Based on the profile, the data subject received several phone calls from people who wanted to contact her regarding the information provided on the website. As the private person was found to have a personality disorder, the fine was reduced from initial EUR 1000 to EUR 800.

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.