Persónuvernd- nr. 2018/1779
|Persónuvernd (Iceland) - nr. 2018/1779|
|Relevant Law:||Article 5(1)(a) GDPR|
Article 5(1)(b) GDPR
Article 5(1)(f) GDPR
Article 6(1)(a) GDPR
Act no. 90/2018
|National Case Number/Name:||nr. 2018/1779|
|European Case Law Identifier:||n/a|
|Original Source:||Persónuvernd (in IS)|
The Persónuvernd decided that the transmission of employee’s call record to his ex-wife violates the national act on electronic monitoring and processing of personal information generated by electronic monitoring.
English Summary[edit | edit source]
Facts[edit | edit source]
A citizen complained that his ex-wife received work call records containing personal data about him.
Dispute[edit | edit source]
Is the dissemination of personal data to the data subject's ex-wife, without having obtained the data subject's consent, lawful?
Holding[edit | edit source]
The Persónuvernd considered that the dissemination of personal data to a third party without having the data subject's consent unlawful. Especially, it found that the processing was contrary to several principles including the fairness and transparency principle, the purpose limitation principle and the integrety and confidentailty principles pursuant to the GDPR and its national act on electronic monitoring and processing of personal information generated by electronic monitoring.
Comment[edit | edit source]
Add your comments here!
Further Resources[edit | edit source]
Share blogs or news articles here!
English Machine Translation of the Decision[edit | edit source]
The decision below is a machine translation of the original. Please refer to the Icelandic original for more details.