Enforcement
EN GERMANY DPA: Non-compliance with general data processing principles
€294,000 fine - Data Protection Authority of Niedersachsen
Content
A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.
GDPR Articles: Art. 5 GDPR
Industry: Employment