It lacks risk analysis and the implementation of security measures. Principle of confidentiality.

It resolves to admonise the City Council since for an unspecified period, which at least covers the months of November 2020 until January 2021, it did not have a risk analysis of the personal data it processed, nor had it implemented all the security and technical measures, in accordance with the National Security Scheme, as required by Article 32 GDPR, in relation to the recording of telephone calls maintained by the local police. On the other hand, the dissemination by a local police officer to other agents of the body, of the content of a telephone conversation held by the complainant with a Medical Emergencies Service worker, contravened the principle of confidentiality.