Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
10 de marzo de 2020
Autoridad
Icelandic data protection authority ('Persónuvernd')
IS
Sector
Public Sector and Education
País
IS
Ley
GDPREstado
FINALDescripción
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Citas legales
Art. 5 (1)Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security