Unknown Organisation

€725,000

Insufficient legal basis for data processing

Beslissingsdatum

30 april 2020

Autoriteit

Dutch Supervisory Authority for Data Protection (AP)

NL

Sector

Employment

Land

NL

Wet

GDPR

Status

FINAL

Beschrijving

The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.

Juridische citaten

Art. 5Art. 9

Problemen en overtredingen

Insufficient legal basis for data processing

Blijf op de hoogte van privacybescherming

We respecteren je privacy. Eén e-mail per maand, geen spam, afmelden kan altijd.