APD/GBA (Belgium) · 19 July 2022
Employer
Name not published.
About: Data principles, Special categories, Unlawful processing
FineNo fineViolation found
- Regulator
- APD/GBA (Belgium)
- Decided
- 19 July 2022
- Country
- Belgium
- Sector
- Not given
- Regulator’s reference
- 115/2022
- Fino case number
- 2022/BE/030
What happened
The Belgian DPA held that discussing a data subject's health-related personal data in a staff meeting where she was absent and consequently including the data in the minutes of the meeting was incompatible with the purpose of the original processing (personnel management) and did not have any other legal basis to rely on.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(c)Read →
- Art. 6Lawfulness of processing6(1) · 6(4)Read →
- Art. 9Processing of special categories of personal data9(2) · 9(4)Read →
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/BE/030.