Company

Нет в наличии

Insufficient legal basis for data processing

Дата принятия решения

1 января 2022 г.

Авторитет

Data Protection Authority of Bremen

DE

Сектор

Industry and Commerce

Страна

HU

Закон

GDPR

Статус

FINAL

Описание

The DPA of Bremen has imposed a five-digit fine on a company. The company had sent an unredacted social plan to all affected employees in the context of dismissals due to operational reasons, resulting in the disclosure of personal data contained therein, such as date of birth, age, marital status, number of dependent children, function in the company, severe disability, etc., to all employees. The DPA found that such extensive disclosure of personal data was unlawful due to the lack of a legal basis. The DPA considered the fact that special categories of personal data, such as information on a severe disability, had also been disclosed to be an aggravating factor.

Юридические цитаты

Art. 6 (1)

Проблемы и нарушения

Insufficient legal basis for data processing

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.