Details:

Summary The AEPD’s decision reveals that the high school unlawfully published health data and other information of more than 2000 teachers in the teacher rankings published on the Institute’s website. This publication was made in violation of the principles of lawfulness, fairness, transparency and data minimization.
Link: link
Related articles:  Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR
Type: Insufficient legal basis for data processing
Fine: EUR 4,000
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law