Details:

Summary Personal data have been unlawfully published on the website of a city within the framework of fulfilling its disclosure obligation under the Freedom of Information Act. However, the Data Protection Authority stated that the City had published the personal data in violation of the law and without the consent of the person concerned.
Link: link
Related articles:  Art. 5 (1) a) GDPR, Art. 6 (1) a) GDPR
Type: Insufficient legal basis for data processing
Fine: EUR Unknown
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law