Basketball Federation of Castilla and Leon
€5,000
Insufficient legal basis for data processing
Decision Date
28 de agosto de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).
Legal Citations
Art. 5Art. 6
Issues & Violations
Insufficient legal basis for data processing