Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Data deciziei
10 martie 2020
Autoritatea
Icelandic data protection authority ('Persónuvernd')
IS
Sector
Public Sector and Education
Țara
IS
Legea
GDPRStatut
FINALDescriere
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Citări juridice
Art. 5 (1)Art. 32
Probleme și încălcări
Insufficient technical and organisational measures to ensure information security