Details:
| Summary | Making copies of a company’s business records in the context of investigations which contained data from third parties and for which there was no legal basis for processing. |
| Link: | link |
| Related articles: | Art. 5 GDPR, Art. 6 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 6,000 |
| Sector | Public Sector and Education |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/