Private individual
€600
Insufficient legal basis for data processing
Fecha de la decisión
5 de agosto de 2021
Autoridad
Austrian Data Protection Authority (dsb)
AT
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Citas legales
Art. 9
Problemas e infracciones
Insufficient legal basis for data processing