Skip to content
Enforcement · Data Protection Authority of Sachsen-Anhalt EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Private person: Insufficient legal basis for data processing

€2,500 Fine
Private person
GERMANY
Art. 6 GDPR Art. 5 GDPR

How it connects

Full text

The fine was impossed against a private person who sent several e-mails between July and September 2018, in which he used personal e-mail addresses visible to all recipients, from which each recipient could read countless other recipients. The man was accused of ten offences between mid-July and the end of July 2018. According to the authority's letter, between 131 and 153 personal mail addresses were identifiable in his mailing list.

Industry: Individuals and Private Associations

Similar Content