Breiðholt Upper Secondary School
€9,000
Insufficient technical and organisational measures to ensure information security
Ngày ra quyết định
10 tháng 3, 2020
Thẩm quyền
Icelandic data protection authority ('Persónuvernd')
IS
Ngành
Public Sector and Education
Quốc gia
IS
Luật
GDPRTrạng thái
FINALMô tả
In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.
Trích dẫn pháp lý
Art. 5 (1)Art. 32
Vấn đề & Vi phạm
Insufficient technical and organisational measures to ensure information security