Private individual

Not Available

Insufficient legal basis for data processing

Decision Date

1 de janeiro de 2021

Authority

Data Protection Authority of Brandenburg

DE

Sector

Individuals and Private Associations

Country

ES

Law

GDPR

Status

FINAL

Description

The DPA from Brandenburg imposed a three-digit fine on a company employee. The individual had sent an Excel spreadsheet with employee data of 56 employees to her private e-mail address from her official computer, although this was not necessary for her official activities. For this reason, the DPA determined that the employee had unlawfully transferred the other employees' data. The spreadsheet included, in addition to the full names of the employees, an overview of vacation days already taken and remaining, sick days accrued, wage data, overtime worked and social security contributions.

Legal Citations

Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.