Unknown – €6,250 Fine (Latvia, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An employer in Latvia was fined EUR 6,250 for unlawfully sharing an employee's personal and health data with other employees via email. The Latvian data protection authority found that this was done without a valid legal reason. This case stresses the importance of handling employee data with care.
What happened
An employer sent an employee's personal and health data to other employees without a legal basis.
Who was affected
An employee whose personal and health data was shared with colleagues.
What the authority found
The Latvian authority found that the employer processed personal data unlawfully, lacking a valid legal basis.
Why this matters
This ruling serves as a reminder to employers about the importance of having a legal basis for processing employee data. It highlights the need for careful handling of sensitive information in the workplace.
GDPR Articles Cited
The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.
Related Enforcement Actions (2)
Other enforcement actions involving Unknown in LV
Details
Fine Date
15 December 2020
Authority
Datu valsts inspekcija
Fine Amount
€6,250
Enforcement Tracker ID
ETid-488
About this data
Cite as: Cookie Fines. Unknown - Latvia (2020). Retrieved from cookiefines.eu
Last updated: