Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Дата прийняття рішення
10 березня 2020 р.
Влада
Icelandic data protection authority ('Persónuvernd')
IS
Сектор
Public Sector and Education
Країна
IS
Право
GDPRСтатус
FINALОпис
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Юридичні посилання
Art. 5 (1)Art. 32
Проблеми та порушення
Insufficient technical and organisational measures to ensure information security