Legal Person: Insufficient legal basis for data processing

The Czech DPA has imposed a fine of EUR 20,050 on a legal person. The accused processes hundreds of thousands of personal data on the website about self-employed persons without legal basis, at least in the scope of name, surname and ID number, when these personal data are translated from the commercial, trade and other public registers. Moreover, the accused did not respond to requests for access to personal data.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 12 (2), (3) GDPR, Art. 14 GDPR, Art. 15 GDPR
Industry: Industry and Commerce