Tietosuojavaltuutetun toimisto (Finland) · 21 March 2023
City X (Board for Growth and Learning)
About: Accountability, Data principles
FineNo fineViolation found
- Regulator
- Tietosuojavaltuutetun toimisto (Finland)
- Decided
- 21 March 2023
- Country
- Finland
- Sector
- Not given
- Regulator’s reference
- 6064/163/20
- Fino case number
- 2023/FI/005
What happened
The Finnish DPA found a city in Finland responsible for organising primary education infringing multiple GDPR provisions, as personal data of pupils were made visible to an unnecessarily wide group of people through MS Office 365 e-mail address book.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(c) · 5(1)(f)Read →
- Art. 25Data protection by design and by default25(2)Read →
- Accountability
- Data principles
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/FI/005.