Germany

Private individual

—

GDPR enforcement action by Data Protection Authority of Bremen on 2022.

Case details

Authority: Data Protection Authority of Bremen
Date: 2022
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Bremen imposed a fine on a private individual. The individual who worked in a restaurant, had contacted a restaurant visitor privately using the contact information they had provided, which was required for a restaurant visit during the Covid 19 pandemic.

Open original source Links to the regulator's original publication or another source.