# Private individual: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Niedersachsen
- Date: 2022-01-01
- Original: https://www.enforcementtracker.com/ETid-1887
- Canonical: https://overview.legal/posts/48002
- Topics: Personal Data, Consent, Processing, Processing Agreement, Supervisory Authorities

## Summary

The DPA of Niedersachsen imposed a fine of EUR 5,00 on a private individual. The individual had taken pictures of numerous young women in public. In the course of its investigation, the DPA found that the individual had processed the personal data of the young women, although no effective consent had been given.

## Full text

The DPA of Niedersachsen imposed a fine of EUR 5,00 on a private individual. The individual had taken pictures of numerous young women in public. In the course of its investigation, the DPA found that the individual had processed the personal data of the young women, although no effective consent had been given.

GDPR Articles: Art. 6 GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/48002 · 2026-08-22