Unknown Organisation

€725,000

Insufficient legal basis for data processing

Data della decisione

30 aprile 2020

Autorità

Dutch Supervisory Authority for Data Protection (AP)

NL

Settore

Employment

Paese

NL

Legge

GDPR

Stato

FINAL

Descrizione

The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.

Citazioni legali

Art. 5Art. 9

Problemi e violazioni

Insufficient legal basis for data processing

Rimanete aggiornati sull'applicazione della privacy

Rispettiamo la vostra privacy. Un'email al mese, niente spam, cancellazione in qualsiasi momento.