Enforcement · Data Protection Authority of Berlin EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Humboldt Forum Service GmbH: Insufficient legal basis for data processing
The DPA of Berlin has imposed fines totaling EUR 215,000 on Humboldt Forum Service GmbH.
Full text
The DPA of Berlin has imposed fines totaling EUR 215,000 on Humboldt Forum Service GmbH. Humboldt Forum had improperly documented sensitive information about individual employees and assessed their continued employment as 'critical' or 'very critical' on the basis of the information. The document also contained information on personal statements, health concerns, a possible interest in forming a works council and treatment in psychotherapy. During its investigation, the DPA found that the controller did not have a valid legal basis to process such sensitive data.
Industry: Employment
How it connects
Related across sources
Guidelines 04/2022 calculation of administrative fines under the GDPR Guidelines ·EDPB May 24, 2023 Fines Notified Body Reporting and Notification Obligations Supervision
Guidelines 04/2026 application of the power to impose administrative fines in relation to other corrective powers under the GDPR Guidelines ·EDPB Sep 17, 2026 Fines Authority Powers for Fundamental Rights Protection Supervision
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Jan 30, 2020 Personal Data Processing Material scope (GDPR)
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Public Authority Processors
10 A 5144/23 VG Hannover: Controller appeals DPA reprimand over unlawful workplace video surveillance The owner of a doner kebab production facility (the controller) had installed video cameras to monitor virtually every room of the business premises. Cameras were placed in the… Administrative Court Hannover Aug 7, 2026 Controllers Supervisory Authorities Legitimate Interest
2018 Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Guidelines on transparency EDPB Apr 11, 2018 Transparency Information Provision Modalities and Communication Methods Fairness & Transparency