Details:
| Summary | The NAIH found that there were inappropriate legal bases is use and that the controller did not comply with the principle of purpose limitation. Also, information on the data processing was not fully provided to data subjects. |
| Link: | link |
| Related articles: | Art. 6 GDPR, Art. 5 (1) b) GDPR, Art. 13 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 92,146 |
| Sector | Media, Telecoms and Broadcasting |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/