# Private person: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Sachsen-Anhalt
- Date: 2019-02-05
- Original: https://www.enforcementtracker.com/ETid-28
- Canonical: https://overview.legal/posts/46143
- Topics: Recipient, IP Address, Criminal Data, Processing, Identification, Supervisory Authorities

## Summary

The fine was impossed against a private person who sent several e-mails between July and September 2018, in which he used personal e-mail addresses visible to all recipients, from which each recipient could read countless other recipients. The man was accused of ten offences between mid-July and the end of July 2018. According to the authority's letter, between 131 and 153 personal mail addresses were identifiable in his mailing list.

## Full text

The fine was impossed against a private person who sent several e-mails between July and September 2018, in which he used personal e-mail addresses visible to all recipients, from which each recipient could read countless other recipients. The man was accused of ten offences between mid-July and the end of July 2018. According to the authority's letter, between 131 and 153 personal mail addresses were identifiable in his mailing list.

GDPR Articles: Art. 6 GDPR, Art. 5 GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/46143 · 2026-08-22