Enforcement
EN Colegio Arenales Carabanchel (School): Insufficient legal basis for data processing
€3,000 fine - Spanish Data Protection Authority (aepd)
Content
The decision of the data protection authority states that the school transferred pictures (and therefore personal data) to third parties, who published them without legal basis.
GDPR Articles: Art. 6 GDPR
Industry: Public Sector and Education