Municipality: Insufficient legal basis for data processing

A public school shared personal information with a municipal mayor, who disclosed it through the city radio mobile application.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 13 GDPR, Art. 14 (3) GDPR
Industry: Public Sector and Education