Private individual
€1,500
Insufficient legal basis for data processing
결정 날짜
2021년 7월 2일
권한
Spanish Data Protection Authority (aepd)
ES
섹터
Individuals and Private Associations
국가
ES
법률
GDPR상태
FINAL설명
The Spanish DPA (AEPD) has imposed a fine of EUR 1,500 on a private individual. That private individual had published personal data of the data subject on a website without her permission. The data included photos, personal notes and information about the sexual relationship between the controller and the data subject. The DPA finds that the controller processed these data without a valid legal basis and thus violated Art. 6 (1) a) GDPR.
법적 인용
Art. 6 (1)
문제 및 위반 사항
Insufficient legal basis for data processing