Iceland

Breiðholt Upper Secondary School

9,000 €

GDPR enforcement action by Icelandic data protection authority ('Persónuvernd') on 2020-03-10.

Rank · Sector

#193

of 357 in Public Sector and Education

Rank · Iceland

#21

of 22

Rank · All fines

#1,471

of 3,050

Case details

Authority: Icelandic data protection authority ('Persónuvernd')
Date: 2020-03-10
Controller / Processor: Breiðholt Upper Secondary School
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

In violation of Art. 32 GDPR, a teacher had sent an e-mail to his students and their parents with an attachment containing data on their well-being, academic performance and social conditions.

Open original source Links to the regulator's original publication or another source.