The employer had included the cause of the incapacity for work in the absence registration, and this was accessible online to everyone.
AP fine to Tennis Federation for (commercial) use of its members’ personal data serves as a warning to other (sports) associations
At the end of 2019, the Dutch Data Protection Authority (AP) imposed a huge fine of 500,000 euros on the tennis federation. The AP interprets the GDPR very strictly and considers the provision of data to partners for direct marketing, even if completely transparent and with the knowledge of the members, as "unlawful." Citizens must be able to maintain control over their data, and that right must carry more weight. See our summary of the fine decision here:
When you need to perform a DPIA
The GDPR has been in effect since May 25, 2018, but not all companies are “GDPR-proof” yet. An important (first)...
