Unknown Organisation

€725,000

Insufficient legal basis for data processing

Datum odločitve

30. april 2020

Organ

Dutch Supervisory Authority for Data Protection (AP)

NL

Sektor

Employment

Država

NL

Zakon

GDPR

Status

FINAL

Opis

The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.

Pravne navedbe

Art. 5Art. 9

Vprašanja in kršitve

Insufficient legal basis for data processing

Spremljajte novice o uveljavljanju zasebnosti

Spoštujemo vašo zasebnost. Eno e-poštno sporočilo na mesec, brez neželene pošte, odjava kadar koli.