Private individual: Insufficient legal basis for data processing

The DPA of Berlin imposed a fine on a private individual. The individual, who worked in a store, had contacted a customer privately using the contact information they had provided, which was required to access stores during the Covid 19 pandemic.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Individuals and Private Associations