Private individual

€200

Insufficient legal basis for data processing

Sprendimo priėmimo data

2021 m. liepos 30 d.

Institucija

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

RO

Sektorius

Individuals and Private Associations

Šalis

ES

Teisė

GDPR

Statusas

FINAL

Aprašymas

The Romanian DPA (ANSPDCP) has imposed a fine of EUR 200 on a private individual due to the unlawful disclosure of personal data. The controller had disclosed personal data of several individuals by distributing some materials in households of the municipality and through posts on his personal Facebook account. This involved, on the one hand, a photo of a salary statement of the data subject, whereby, among other things, the surname, first name, place of work and salary could be extracted. The other was a photo of a file from the register of children enrolled in the kindergarten of the municipality, whereby personal data of a minor child were disclosed. The DPA found that the controller had processed the data without a legal basis and had not informed the data subjects about the processing of their data.

Teisinės citatos

Art. 5 (1)Art. 6 (1)Art. 14 (1)

Problemos ir pažeidimai

Insufficient legal basis for data processing

Gaukite naujausią informaciją apie privatumo vykdymo užtikrinimą

Gerbiame jūsų privatumą. Vienas el. laiškas per mėnesį, jokių šlamšto, atsisakykite prenumeratos bet kada.