Employer: Insufficient fulfilment of data subjects rights

The Hellenic DPA has imposed a fine of EUR 2,000 on an employer. An employee had filed a complaint due to the employer's failure to comply with the employee's right to object. The employee had objected to continuous monitoring of his online courses offered via zoom. However, the employer had continued the monitoring. In addition, the DPA found that the employer could not provide a sufficient legal basis for processing the data.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 13 GDPR
Industry: Employment