Germany

Company

—

GDPR enforcement action by Data Protection Authority of Bremen on 2022.

Case details

Authority: Data Protection Authority of Bremen
Date: 2022
Controller / Processor: Company
Sector: Employment
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Bremen has imposed a five-digit fine on a company. The company had transferred the pay slips of its employees without their consent to another company, which was to continue to employ the employees in the future. The DPA considered the fact that a high double-digit number of employees were affected as an aggravating factor.

Open original source Links to the regulator's original publication or another source.