School in Gdansk (Danzig) (fine imposed against town of Gdansk)
不可用
Insufficient legal basis for data processing
決定日期
2020年3月4日
權限
Polish National Personal Data Protection Office (UODO)
PL
部門
Public Sector and Education
國家
PL
法律
GDPR狀態
FINAL說明
Original summary: A school in Gdansk used biometric fingerprint scanners to authenticate students for the payment process in the school canteen. Although the parents had given their written consent to such data processing, the data protection authority considered the processing of the student data to be unlawful, as the consent to data processing was not given voluntarily. Update: Update: On August 7, 2020, the Provincial Administrative Court in Warsaw overturned the decision of the Polish DPA imposing a fine of EUR 4,600.
法律引文
Art. 5Art. 9
問題與違規
Insufficient legal basis for data processing