Tietosuojavaltuutetun toimisto (Finland) · 18 March 2022
City of Oulu
About: Special categories, Unlawful processing
FineNo fineViolation found
- Regulator
- Tietosuojavaltuutetun toimisto (Finland)
- Decided
- 18 March 2022
- Country
- Finland
- Sector
- Not given
- Regulator’s reference
- 8979/162/21
- Fino case number
- 2022/FI/021
What happened
The Finnish DPA found the social and health authority of a city to have breached Article 6(1) GDPR and Article 10 GDPR by requesting data subjects to provide it with personal data that it had no legal basis for processing.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 4Definitions4(2)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 10Processing of personal data relating to criminal convictions and offencesRead →
- Art. 58Powers58(2)(b)Read →
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/FI/021.