Enforcement·Austrian Data Protection Authority (dsb)EN
Export
Private individual: Insufficient legal basis for data processing
The Austrian Data Protection Authority (dsb) fined a private individual €700 for processing personal data without a sufficient legal basis.
StatusNot cited by any decision here yet
Summary
The authority found the individual violated GDPR Articles 5(1)(a), 5(1)(b), and 6(1) by failing to establish a valid lawful basis and purpose limitation for the data processing at issue.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
Related across sources
C-621/22 Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens The CJEU ruled on a preliminary reference from the Amsterdam District Court in proceedings between the Koninklijke Nederlandse Lawn Tennisbond (KNLTB) and the Dutch Data… CJEU ·Ninth Chamber Oct 4, 2024 Personal Data Legitimate Interest IP Address
Guidelines 1/2024 processing of personal data based on Article 6(1)(f) GDPR Guidelines ·EDPB Nov 10, 2026 Legitimate Interest Personal Data Processing
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Fairness & Transparency
C-17/22 HTB Neunte Immobilien Portfolio geschlossene Investment UG & Co. KG and Ökorenta Neue Energien Ökostabil IV geschlossene Investment GmbH & Co. KG v Müller Rechtsanwaltsgesellschaft mbH and Others The Court of Justice of the European Union (Fourth Chamber) issued a preliminary ruling in joined cases C-17/22 and C-18/22, originating from the Amtsgericht München, concerning… CJEU ·Fourth Chamber Sep 12, 2024 Legitimate Interest Personal Data Controllers
C-26/22 UF and AB v Land Hessen The Court of Justice of the European Union (First Chamber) ruled on preliminary references from the Verwaltungsgericht Wiesbaden in joined cases C-26/22 and C-64/22, concerning UF… CJEU ·First Chamber Dec 7, 2023 Legitimate Interest Right to be Forgotten Personal Data
2018-14 (15/01355) Personvernnemnda (Norway) - 2018-14 (15/01355) In 2017, the Norwegian DPA Datatilsynet found that a company "Legelisten", running an anonymous review website of healthcare personnel, lacked a legal basis for processing and… PVN Jan 21, 2019 Legitimate Interest Personal Data Controllers