Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Päätöspäivä
10. maaliskuuta 2020
Viranomainen
Icelandic data protection authority ('Persónuvernd')
IS
Ala
Public Sector and Education
Maa
IS
Laki
GDPRTila
FINALKuvaus
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Oikeudelliset viittaukset
Art. 5 (1)Art. 32
Asiat ja rikkomukset
Insufficient technical and organisational measures to ensure information security