Basketball Federation of Castilla and Leon
€5,000
Insufficient legal basis for data processing
Fecha de la decisión
28 de agosto de 2020
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
País
ES
Ley
GDPREstado
FINALDescripción
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).
Citas legales
Art. 5Art. 6
Problemas e infracciones
Insufficient legal basis for data processing