Enforcement
EN Company: Insufficient legal basis for data processing
Data Protection Authority of Bremen
Content
The DPA in Bremen has imposed a fine on a company. The controller had stored an applicant's application documents after the application process for the purpose of further retention for the purpose of considering the applicant for future vacancies but had not obtained consent from the applicant in question.
GDPR Articles: Art. 6 (1) a) GDPR
Industry: Employment