Tusla Child and Family Agency
€75,000
Insufficient legal basis for data processing
Date de décision
17 mai 2020
Autorité
Data Protection Authority of Ireland
IE
Secteur
Public Sector and Education
Pays
IE
Droit
GDPRStatut
FINALDescription
The company has erroneously disclosed personal data, including information about children, to unauthorized persons. In one case, the contact and location data of a mother and a child were disclosed to an alleged offender, and in two other cases, data about children in foster care were improperly disclosed to blood relatives, including in one case to a father in prison.
Citations légales
Art. 5Art. 6
Questions et violations
Insufficient legal basis for data processing