Private individual
€600
Insufficient legal basis for data processing
Decision Date
5 de agosto de 2021
Authority
Austrian Data Protection Authority (dsb)
AT
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Legal Citations
Art. 9
Issues & Violations
Insufficient legal basis for data processing