Sanction RGPD Data Protection Authority of Hessen — Police officer : 400 € (2021)
- Autorité de contrôle
- Data Protection Authority of Hessen
- Pays
- Allemagne
- Entreprise / secteur
- Police officer
- Montant de l'amende
- 400 €
- Date de la décision
- 1 janvier 2021
- Fondement juridique
- Art. 5, Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
A police officer had accessed data in police databases for private research purposes. The officer had purchased a notebook for private use on an Internet platform. Since the seller did not agree to negotiations about the method of payment, the officer used a police information system to obtain information about the seller. The police officer then sent several messages to the seller in which he provided him with certain personal data, that he had obtained through his research in the police database. The goal was to reinforce his demand for an alternative payment method by mentioning the information obtained.