Austria

Private individual

600 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2021-08-05.

Rank · Sector

#205

of 351 in Individuals and Private Associations

Rank · Austria

#32

of 38

Rank · All fines

#2,764

of 3,042

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2021-08-05
Controller / Processor: Private individual
Sector: Individuals and Private Associations
Quoted Articles: Art. 9 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Austrian DPA has imposed a fine of EUR 600 on a private individual. A private individual had sent a document obtained in a court case between the data subject and himself to the data subject's employer. This document contained information regarding health-related data of the data subject. At no time had the data subject consented to the forwarding of the document to her employer.

Open original source Links to the regulator's original publication or another source.