Germany

Car trading group

10,100 €

GDPR enforcement action by Data Protection Authority of Hamburg on 2021.

Rank · Sector

#207

of 595 in Industry and Commerce

Rank · Germany

#64

of 116

Rank · All fines

#1,308

of 3,042

Case details

Authority: Data Protection Authority of Hamburg
Date: 2021
Controller / Processor: Car trading group
Sector: Industry and Commerce
Quoted Articles: Unknown
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Hamburg has imposed a fine of EUR 10,110 on a car trading group. The company had informed the customer base that the reasons for the restructuring there was the absence of an employee due to illness. The company informed approximately 3,000 customers, among other things, of the exact date on which the employee's inability to work occurred and that the situation would continue for an indefinite period of time. The DPA found that the company did not present a valid legal basis for such transfer of personal health data, and therefore transferred the data unlawfully.

Open original source Links to the regulator's original publication or another source.