Unknown

€6,250

Insufficient legal basis for data processing

Decision Date

15 de dezembro de 2020

Authority

Data State Inspectorate (DSI)

LV

Sector

Not assigned

Country

CZ

Law

GDPR

Status

FINAL

Description

The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.