Voorschoten municipality

€30,000

Non-compliance with general data processing principles

决定日期

2023年11月2日

权力

Dutch Supervisory Authority for Data Protection (AP)

NL

部门

Public Sector and Education

国家

NL

法律

GDPR

现状

FINAL

说明

The Dutch DPA has imposed a fine of EUR 30,000 on Voorschoten municipality. The municipality had kept information about household waste for longer than necessary and had not sufficiently informed residents. In 2018 and 2019, the municipality of Voorschoten had replaced the waste garbage cans for houses and the underground containers for apartments. These bins were fitted with chips with numbers that were linked to a house address. The aim was to increase the collection of separate waste by limiting the amount of residual waste that residents could dispose of. However, the municipality stored the waste collection data of households for too long. For example, garbage can data was kept for as long as it was in use and underground container token data was stored for five years. According to the DPA, this is much longer than is necessary to check whether a household is exceeding the permitted amount. In addition, the municipality did not sufficiently inform residents about the use of their personal data when collecting waste.

法律引文

Art. 5 (1)Art. 6 (1)Art. 14 (1)

问题与违规

Non-compliance with general data processing principles

随时了解隐私执法的最新情况

我们尊重您的隐私。每月一封电子邮件,无垃圾邮件,随时退订。