Private individual
€600
Insufficient legal basis for data processing
Datum för beslut
5 augusti 2021
Myndighet
Austrian Data Protection Authority (dsb)
AT
Sektor
Individuals and Private Associations
Land
ES
Lag
GDPRStatus
FINALBeskrivning
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
Rättsliga hänvisningar
Art. 9
Frågor och överträdelser
Insufficient legal basis for data processing