Private person: Insufficient legal basis for data processing

The fine was impossed against a private person who sent several e-mails between July and September 2018, in which he used personal e-mail addresses visible to all recipients, from which each recipient could read countless other recipients. The man was accused of ten offences between mid-July and the end of July 2018. According to the authority's letter, between 131 and 153 personal mail addresses were identifiable in his mailing list.

GDPR Articles: Art. 6 GDPR, Art. 5 GDPR
Industry: Individuals and Private Associations