Ministry of Migration and Asylum

What happened

The DPA fined the Ministry of Migration and Asylum € 175,000 for several GDPR violations in its surveillance of migrants in asylum facilities, including the unlawful processing of biometric data.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
• Art. 22Automated individual decision-making, including profilingRead →
• Art. 24Responsibility of the controllerRead →
• Art. 25Data protection by design and by default25(1)Read →
• Art. 28ProcessorRead →
• Art. 30Records of processing activitiesRead →
• Art. 31Cooperation with the supervisory authorityRead →
• Art. 35Data protection impact assessmentRead →
• Art. 37Designation of the data protection officerRead →
• Art. 38Position of the data protection officerRead →
• Art. 39Tasks of the data protection officerRead →
• Art. 55CompetenceRead →
• Art. 83General conditions for imposing administrative finesRead →

• Accountability
• DPIA
• Data principles
• Data protection officer
• Data subject rights
• Processor obligations
• Transparency