Germany

Private individual

500 €

GDPR enforcement action by Data Protection Authority of Niedersachsen on 2022.

Rank · Sector

#245

of 351 in Individuals and Private Associations

Rank · Germany

#105

of 116

Rank · All fines

#2,869

of 3,050

Case details

Authority: Data Protection Authority of Niedersachsen
Date: 2022
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Niedersachsen imposed a fine of EUR 5,00 on a private individual. The individual had taken pictures of numerous young women in public. In the course of its investigation, the DPA found that the individual had processed the personal data of the young women, although no effective consent had been given.

Open original source Links to the regulator's original publication or another source.