President of a workers' council

€600

Non-compliance with general data processing principles

Decision Date

23 de maio de 2024

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Employment

Country

ES

Law

GDPR

Status

FINAL

Description

The Spanish DPA has imposed a fine on the president of the workers' council of a company following a complaint by a former employee. During their employment, the company carried out a collective redundancy procedure that affected the employee. The council had publicly posted a record of a meeting between the employee representatives and the works council, which contained a list of the employees affected with personal data such as names, ID card numbers, dates of birth, etc. The original fine of EUR 1,000 was reduced to EUR 600 upon admission of responsibility and voluntary payment.

Legal Citations

Art. 5 (1)

Issues & Violations

Non-compliance with general data processing principles

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.