Private individual: Insufficient legal basis for data processing

The DPA of Niedersachsen imposed a fine of EUR 5,00 on a private individual. The individual had taken pictures of numerous young women in public. In the course of its investigation, the DPA found that the individual had processed the personal data of the young women, although no effective consent had been given.

GDPR Articles: Art. 6 GDPR
Industry: Individuals and Private Associations