Sanction RGPD Dutch Supervisory Authority for Data Protection (AP) — Unknown Organisation : 725 k€ (2020)
- Autorité de contrôle
- Dutch Supervisory Authority for Data Protection (AP)
- Pays
- Pays-Bas
- Entreprise / secteur
- Unknown Organisation
- Montant de l'amende
- 725 k€
- Date de la décision
- 30 avril 2020
- Fondement juridique
- Art. 5, Art. 9
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The organisation had required its staff to have their fingerprints scanned to record attendance. However, as the decision of the data protection authority stated, the organisation could not rely on exceptions to the processing of this special category of personal data and the company could also not provide any evidence that the employees had given their consent to this data processing.