Details:

Summary The DPA of Bremen imposed a fine on a private individual. The individual, who worked at a Covid19 testing center, had contacted a patient privately using the contact details the patient had provided for their Covid-test
Link: link
Related articles:  Art. 6 (1) GDPR
Type: Insufficient legal basis for data processing
Fine: EUR Unknown
Sector Individuals and Private Associations

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law