Details:

Summary Data was not only processed if adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’) and not only kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (‘storage limitation’).
Link: link
Related articles:  Art. 5 (1) GDPR
Type: Non-compliance with general data processing principles
Fine: EUR 10,000
Sector Not assigned

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law