# Police department: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Brandenburg
- Date: 2021-01-01
- Original: https://www.enforcementtracker.com/ETid-1280
- Canonical: https://overview.legal/posts/47395
- Topics: Personal Data, Public Authority, Education, Public Sector, Processing Agreement, Processing, Supervisory Authorities, Law Enforcement

## Summary

A police officer had unlawfully disclosed personal data of a drunk driving incident to the offender's mother during a chance encounter. He thought that the mother, as his employer, could prevent a repeat offense by withdrawing the offender's car. However, the mother constitutes an unauthorized third party, meaning that the police officer was not allowed to disclose the information. For this reason, the DPA of Brandenburg imposed a fine for a violation of § 32 (1) BbgDSG. The Brandenburg Data Pro

## Full text

A police officer had unlawfully disclosed personal data of a drunk driving incident to the offender's mother during a chance encounter. He thought that the mother, as his employer, could prevent a repeat offense by withdrawing the offender's car. However, the mother constitutes an unauthorized third party, meaning that the police officer was not allowed to disclose the information. For this reason, the DPA of Brandenburg imposed a fine for a violation of § 32 (1) BbgDSG. The Brandenburg Data Protection Act (BbgDSG) sets out the supplementary regulations necessary to adapt the GDPR.

GDPR Articles: § 32 Absatz 1 BbgDSG
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/47395 · 2026-08-22