Persónuvernd (Iceland) · 8 March 2022
Reykjavík University
About: Data principles, Data security, Transparency, Unlawful processing
FineNo fineViolation found
- Regulator
- Persónuvernd (Iceland)
- Decided
- 8 March 2022
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- 2020112830
- Fino case number
- 2022/IS/005
What happened
The Icelandic DPA reprimanded a university for not providing students adequate information regarding the processing of their personal data when remotely monitoring exams taken at home via Zoom due to the COVID19 pandemic, in violation of Articles 5(1)(f) and 32 GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 32Security of processingRead →
- Data principles
- Data security
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IS/005.