Tusla Child and Family Agency
€75,000
Insufficient legal basis for data processing
Decision Date
17 de maio de 2020
Authority
Data Protection Authority of Ireland
IE
Sector
Public Sector and Education
Country
IE
Law
GDPRStatus
FINALDescription
The company has erroneously disclosed personal data, including information about children, to unauthorized persons. In one case, the contact and location data of a mother and a child were disclosed to an alleged offender, and in two other cases, data about children in foster care were improperly disclosed to blood relatives, including in one case to a father in prison.
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing