Germany

Police officer

400 €

GDPR enforcement action by Data Protection Authority of Hessen on 2021.

Rank · Sector

#262

of 351 in Individuals and Private Associations

Rank · Germany

#107

of 116

Rank · All fines

#2,902

of 3,050

Case details

Authority: Data Protection Authority of Hessen
Date: 2021
Controller / Processor: Police officer
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

A police officer had accessed data in police databases for private research purposes. The officer had purchased a notebook for private use on an Internet platform. Since the seller did not agree to negotiations about the method of payment, the officer used a police information system to obtain information about the seller. The police officer then sent several messages to the seller in which he provided him with certain personal data, that he had obtained through his research in the police database. The goal was to reinforce his demand for an alternative payment method by mentioning the information obtained.

Open original source Links to the regulator's original publication or another source.