Enforcement
EN Company: Insufficient legal basis for data processing
€10,000 fine - Data Protection Authority of Hessen
Content
The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.
GDPR Articles: Art. 6 (1) GDPR, Art. 7 GDPR
Industry: Industry and Commerce