AKI (Estonia) · 19 June 2026
Private website operatorPrivate person
About: Accountability, Data principles, Special categories, Unlawful processing
FineNo fineViolation found
- Regulator
- AKI (Estonia)
- Decided
- 19 June 2026
- Country
- Estonia
- Sector
- Not given
- Regulator’s reference
- 2.1.-4/26/1106-2333-4
- Fino case number
- 2026/EE/003
What happened
A private website operator published documents they collected from public registers. The DPA held that the operator failed to ensure that later access restrictions imposed by the authorities are considered and that a legitimate interest could not be a blanket legal basis for all publications.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 9Processing of special categories of personal dataRead →
- Art. 24Responsibility of the controllerRead →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/EE/003.