Persónuvernd (Island) · 15 December 2023
National Police Commissioner
Name not published.
About: Data principles, Transparency, Unlawful processing
FineNo fineViolation found
- Regulator
- Persónuvernd (Island)
- Decided
- 15 December 2023
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- 2022081290
- Fino case number
- 2023/IS/024
What happened
The Icelandic DPA held that the National Police Commissioner, as a controller, was authorised under Article 6(1)(e) GDPR to carry out background checks on personal data of an applicant for a position as emergency operator. However, the controller failed to duly inform the applicant about the extent and purposes of processing.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)Read →
- Art. 6Lawfulness of processing6(1)(e) · 6(3)Read →
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IS/024.