Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Дата принятия решения
10 марта 2020 г.
Авторитет
Icelandic data protection authority ('Persónuvernd')
IS
Сектор
Public Sector and Education
Страна
IS
Закон
GDPRСтатус
FINALОписание
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Юридические цитаты
Art. 5 (1)Art. 32
Проблемы и нарушения
Insufficient technical and organisational measures to ensure information security