PriceWaterhouseCoopers Business Solutions SA (PWC BS)
- Country
- Greece
- Fine
- 150,000 EUR
- Date
- 2019-07-26
- Sector
- Private / Business Consultancy
- Articles
- Article 5 par. 1(a)Article 5 par. 2Article 6 par. 1(a)
Unlawful and non-transparent processing of employees' personal data and failure to demonstrate compliance
The fined company has requested the consent of its employees for the processing of their personal data, for the transfer of their personal data to third parties (including customers) and for the use of video surveillance in the workplace. The Greek Data Protection Authority found that PWC BS was in breach of the following provisions: - Article 5(1)(a) (lawfulness) for unlawfully processing workers' data on the basis of consent which does not constitute an inappropriate legal basis for such processing activities and, in any event, the consent was not valid because it was not given voluntarily, -Article 5(1)(a) (fairness and transparency) and Article 6(1)(a), in order to give the false impression to data subjects in dependent employment that the basis of the processing was consent, although this should not be the case -Article 5(2) in the event that compliance cannot be proved and the burden of proof is transferred to the data subject Authority: HELLENIC DATA PROTECTION AUTHORITY
Additional information
<link http://www.dpa.gr/APDPXPortlets/htdocs/documentDisplay.jsp?docid=13,155,215,105,247,116,41,96 _blank>Link 2</link>
Source: http://www.dpa.gr/APDPXPortlets/htdocs/documentDisplay.jsp?docid=13,155,215,105,247,116,41,96
Reported by: Zepos & Yannopoulos