Persónuvernd (Iceland) · 23 November 2022
School administratorPrivate person
About: Data principles, Unlawful processing
FineNo fineRejected
- Regulator
- Persónuvernd (Iceland)
- Decided
- 23 November 2022
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- Case no. 2021030666
- Fino case number
- 2022/IS/016
What happened
The Icelandic DPA held that a school administrator did not breach the GDPR when sharing the teaching evaluation of a data subject with other staff in a meeting, as the administrator could base the processing on Article 6(1)(c) GDPR and did not share the data with any unauthorized parties.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processing6(1)(c)Read →
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IS/016.