Unknown Organisation
€725,000
Insufficient legal basis for data processing
Lēmuma datums
2020. gada 30. aprīlis
Iestāde
Dutch Supervisory Authority for Data Protection (AP)
NL
Nozare
Employment
Valsts
NL
Likums
GDPRStatuss
FINALApraksts
The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.
Juridiskās atsauces
Art. 5Art. 9
Jautājumi un pārkāpumi
Insufficient legal basis for data processing