Enforcement
EN Legal Entity: Insufficient legal basis for data processing
€11,614 fine - Slovenian Supervisory Authority (Informacijski pooblaščenec)
Content
The Slovenian DPA has imposed a fine of EUR 11,614 on a legal entity. The controller did not delete the email address of a former employee, but rather continued to receive and process all emails sent to that address without a sufficient legal basis. The entity was fined EUR 10,614, and the person responsible was fined EUR 1,000.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Not assigned