PWC Business Solutions
€150K($162K USD)final
Date Issued
2019-07-30
Regulation
Authority
Hellenic Data Protection Authority (HDPA)
Country
Greece
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The company unlawfully processed the employer’s data while creating the illusion that it acted under the legal basis of consent. Whereas, the company was using a different legal basis. This is a strict violation of the transparency principle. Moreover, the company violated the accountability principle when it failed to bring evidence related to the proper assessment of the employer’s data using the right legal bases.
Articles Violated
Art. 5 (1) GDPRArt. 5 (2) GDPRArt. 6 (1) GDPRArt. 13 (1) c) GDPRArt. 14 (1) c) GDPR
Related Headlines
News on data protection law - datenschutz notizen
datenschutz notizen · 10/29/2019