Private individual

Not Available

Insufficient legal basis for data processing

Decision Date

1 de janeiro de 2021

Authority

Data Protection Authority of Brandenburg

DE

Sector

Individuals and Private Associations

Country

ES

Law

GDPR

Status

FINAL

Description

The DPA of Brandenburg has imposed a three-digit fine on a company employee. The employee had forwarded application documents received by his employer from his work e-mail address to his private e-mail address without authorization in order to get suggestions for the design of his own applications. He had not previously anonymized the resumes, so they continued to include all of the applicants' personal and professional data. Since sending the application documents to his private e-mail address was not part of his work duties, the DPA determined that the forwarding was unlawful.

Legal Citations

Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.