Details:

Summary The DPA in Bremen has imposed a fine on a company. The controller had stored an applicant’s application documents after the application process for the purpose of further retention for the purpose of considering the applicant for future vacancies but had not obtained consent from the applicant in question.
Link: link
Related articles:  Art. 6 (1) a) GDPR
Type: Insufficient legal basis for data processing
Fine: EUR Unknown
Sector Employment

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law