Details:
| Summary | The company had left the e-mail account of the data subject active even after the termination of his employment and did not provide sufficient information about this. |
| Link: | link |
| Related articles: | Art. 5 (1) a) GDPR, Art. 12 GDPR, Art. 13 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 10,000 |
| Sector | Employment |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/