Private individual
€600
Insufficient legal basis for data processing
Datum odločitve
5. avgust 2021
Organ
Austrian Data Protection Authority (dsb)
AT
Sektor
Individuals and Private Associations
Država
ES
Zakon
GDPRStatus
FINALOpis
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Pravne navedbe
Art. 9
Vprašanja in kršitve
Insufficient legal basis for data processing