Germany
Unknown
294,000 €
GDPR enforcement action by Data Protection Authority of Niedersachsen on 2019.
Rank · Sector
#10
of 213 in Employment
Rank · Germany
#27
of 116
Rank · All fines
#304
of 3,042
Case details
- Authority
- Data Protection Authority of Niedersachsen
- Date
- 2019
- Controller / Processor
- Unknown
- Sector
- Employment
- Quoted Articles
- Art. 5 GDPR
- Type of violation
- Non-compliance with general data processing principles
Summary
A company was fined EUR 294 000 for 'unnecessarily long' storage and retention of personnel files and for 'excessive' data collection in the personnel selection process, during which also health data were requested.
Open original source
Links to the regulator's original publication or another source.
Related fines
Germany
2024
45,000,000 €
ETid-2646
Vodafone GmbH
Media, Telecoms and Broadcasting
Germany
2020-10-01
35,258,708 €
ETid-405
H&M Hennes & Mauritz Online Shop A.B. & Co. KG
Employment
Germany
2024
4,113,486 €
ETid-2638
Unknown
Not assigned
Germany
2019
3,501,000 €
ETid-943
Unknown
Individuals and Private Associations
Germany
2022
2,001,000 €
ETid-1870
Unknown
Individuals and Private Associations
Germany
2022-03-03
1,900,000 €
ETid-1103
BREBAU GmbH
Real Estate