Enforcement
EN Private individual: Insufficient legal basis for data processing
€600 fine - Austrian Data Protection Authority (dsb)
Content
The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.
GDPR Articles: Art. 9 GDPR
Industry: Individuals and Private Associations