Germany

Private person

2,500 €

GDPR enforcement action by Data Protection Authority of Sachsen-Anhalt on 2019-02-05.

Rank · Sector

#114

of 351 in Individuals and Private Associations

Rank · Germany

#86

of 116

Rank · All fines

#2,161

of 3,042

Case details

Authority: Data Protection Authority of Sachsen-Anhalt
Date: 2019-02-05
Controller / Processor: Private person
Sector: Individuals and Private Associations
Quoted Articles: Art. 6 GDPR, Art. 5 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The fine was impossed against a private person who sent several e-mails between July and September 2018, in which he used personal e-mail addresses visible to all recipients, from which each recipient could read countless other recipients. The man was accused of ten offences between mid-July and the end of July 2018. According to the authority's letter, between 131 and 153 personal mail addresses were identifiable in his mailing list.

Open original source Links to the regulator's original publication or another source.