Details:
| Summary | The DPA of Luxembourg has imposed a fine of EUR 1,500 on a manager of a real estate co-ownership. The controller had disclosed personal data to unauthorized third parties without having a legal basis for such disclosure. In addition, the controller did not respond to requests from data subjects to exercise their rights in a timely manner. |
| Link: | link |
| Related articles: | Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 12 (3), (4) GDPR, Art. 15 (1) b), c) GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 1,500 |
| Sector | Real Estate |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/