Police officer: Insufficient legal basis for data processing

A police officer had accessed data in police databases for private research purposes. The officer had purchased a notebook for private use on an Internet platform. Since the seller did not agree to negotiations about the method of payment, the officer used a police information system to obtain information about the seller. The police officer then sent several messages to the seller in which he provided him with certain personal data, that he had obtained through his research in the police database. The goal was to reinforce his demand for an alternative payment method by mentioning the information obtained.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Individuals and Private Associations