Fundació Universitat Oberta de Catalunya (FUOC)

What happened

The Catalan DPA fined FUOC €31,000 for violating Article 5(1)(c) GDPR by publishing a student’s project with excessive, non-anonymized data of 54 minors in its open-access repository, breaching the data minimisation principle.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(c) · 5(2)Read →
• Art. 9Processing of special categories of personal dataRead →
• Art. 83General conditions for imposing administrative fines83(5)(a)Read →

• Data principles
• Special categories