Unknown
€294,000
Non-compliance with general data processing principles
Date de décision
1 janvier 2019
Autorité
Data Protection Authority of Niedersachsen
DE
Secteur
Not assigned
Pays
CZ
Droit
GDPRStatut
FINALDescription
A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.
Citations légales
Art. 5
Questions et violations
Non-compliance with general data processing principles