# GERMANY DPA: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Data Protection Authority of Niedersachsen
- Date: 2019-01-01
- Original: https://www.enforcementtracker.com/ETid-170
- Canonical: https://overview.legal/posts/46285
- Topics: Health Data, Healthcare, Employees, IP Address, Processing, Human Resources, Processing Agreement, Special Categories of Data, Supervisory Authorities, Types of Special Categories of Personal Data

## Summary

A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.

## Full text

A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.

GDPR Articles: Art. 5 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/46285 · 2026-08-22