Latvia

Unknown

6,250 €

GDPR enforcement action by Data State Inspectorate (DSI) on 2020-12-15.

Rank · Sector

#117

of 223 in Employment

Rank · Latvia

of 10

Rank · All fines

#1,709

of 3,267

Case details

Authority: Data State Inspectorate (DSI)
Date: 2020-12-15
Controller / Processor: Unknown
Sector: Employment
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.

Open original source Links to the regulator's original publication or another source.