IDPC (Malta) · 24 July 2023
Not named in the source
About: Data principles, Data security
FineNo fineViolation found
- Regulator
- IDPC (Malta)
- Decided
- 24 July 2023
- Country
- Malta
- Sector
- Not given
- Regulator’s reference
- CPD/COMP/280/2023
- Fino case number
- 2023/MT/004
What happened
The Maltese DPA decided that a controller, sending personal schoolwork to a data subject's personal email adress with other people in the "cc", is an infringement of Article 5(1)(f) and 32(1)(b) GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f)Read →
- Art. 32Security of processing32(1)(b)Read →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/MT/004.