Lejre Municipality

€6,700

Non-compliance with general data processing principles

Decision Date

30 de junho de 2020

Authority

Danish Data Protection Authority (Datatilsynet)

DK

Sector

Public Sector and Education

Country

DK

Law

GDPR

Status

FINAL

Description

The data protection authority had found that the Lejre Municipal Child and Youth Centre had regularly uploaded minutes of meetings with particularly sensitive and sensitive personal data, including on citizens under 18 years of age, to the Lejre Municipal Personnel Portal, which was accessible to employees of the Lejre Municipality, regardless of whether the employees in question were working with these cases. In addition, the data protection authority denied the failure to comply with the obligation to inform the persons concerned of the data breach.

Legal Citations

Art. 5Art. 6Art. 33Art. 34

Issues & Violations

Non-compliance with general data processing principles

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.