Inappropriate use of contact tracing lists

Inappropriate use of contact tracing lists

A guest of the bistro had complained that his food was cold and as a result left without paying.

In order to locate the guest, bistro employees contacted various customers by phone using the phone numbers that were used for Corona contact tracking. At least one contact could be proven due to a complaint to the authority. The use of the telephone numbers constituted a violation of the purpose limitation principle pursuant to Art. 5 par. 1 lit.b DSGVO . As a result, the Hessian data protection authority found a violation of the General Data Protection Regulation and imposed a fine of 170 euros.

Because the Corona pandemic had a negative impact on the financial situation of the bistro owner, and he was reasonable and cooperative, this was taken into account in the assessment of the amount of the fine.

No exact date could be taken from the activity report of the Hessian data protection authority, the date was given here as December 31, 2021.

Entscheidungsdatum:
31.12.2021

Land:
Germany

Art des Verstoßes:
Illegal data processing

Betroffene Datensätze:
unknown

Waren sensible Daten betroffen?:
No

verhängte Geldstrafe:
€ 170,-

Quelle:
Activity Report 2021 of the HBDI