Basketball Federation of Castilla and Leon
€5,000
Insufficient legal basis for data processing
Datum för beslut
28 augusti 2020
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Individuals and Private Associations
Land
ES
Lag
GDPRStatus
FINALBeskrivning
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).
Rättsliga hänvisningar
Art. 5Art. 6
Frågor och överträdelser
Insufficient legal basis for data processing