Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Data da decisão
10 de março de 2020
Autoridade
Icelandic data protection authority ('Persónuvernd')
IS
Setor
Public Sector and Education
País
IS
Lei
GDPRStatus
FINALDescrição
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Citações legais
Art. 5 (1)Art. 32
Problemas e violações
Insufficient technical and organisational measures to ensure information security