Unknown Organisation

€725,000

Insufficient legal basis for data processing

Fecha de la decisión

30 de abril de 2020

Autoridad

Dutch Supervisory Authority for Data Protection (AP)

NL

Sector

Employment

País

NL

Ley

GDPR

Estado

FINAL

Descripción

The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.

Citas legales

Art. 5Art. 9

Problemas e infracciones

Insufficient legal basis for data processing

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.