Supermarket
Not Available
Insufficient legal basis for data processing
Decision Date
January 1, 2023
Authority
Data Protection Authority of Brandenburg
DE
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The DPA of Brandenburg has imposed a five-figure fine on a company. The controller had posted a list of employees' sickness-related absences for the year 2022 in the employee break room. The list contained details of the days on which they were absent from work due to their own illness or the illness of their child. The table was displayed for four weeks and in some cases third parties such as suppliers also had access to the list.
Legal Citations
Art. 6 (1)Art. 9 (1)
Issues & Violations
Insufficient legal basis for data processing