Persónuvernd (Iceland) · 29 November 2022
Provider of a digital signature
Name not published.
About: Unlawful processing
FineNo fineViolation found
- Regulator
- Persónuvernd (Iceland)
- Decided
- 29 November 2022
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- Case no. 2021101924
- Fino case number
- 2022/IS/019
What happened
The Icelandic DPA held that a provider of a digital signature and verification service violated Articles 5(1) and 6(1) GDPR by processing a data subject's email address and social security number, respectively, without valid consent and contrary to the principle of data minimisation.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IS/019.