Details:
| Summary | A company was fined EUR 294 000 for ‘unnecessarily long’ storage and retention of personnel files and for ‘excessive’ data collection in the personnel selection process, during which also health data were requested. |
| Link: | link |
| Related articles: | Art. 5 GDPR |
| Type: | Non-compliance with general data processing principles |
| Fine: | EUR 294,000 |
| Sector | Employment |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/