Resolutions, opinions and reports search tool

The right to information of the users of the entity, due to lack of documentary accreditation at the time of collection (Articles 12, 13, and 14 GDPR); and due to violation of the principle of application, due to the improper use of the data, which consists of subjective and negative comments on a group of members who wish to submit their candidature.

The installation of a video surveillance system inside the classrooms of municipal kindergartens could be proportionate in the face of reasonable indications of the possible commission of a serious illegal act by a person working any of the children, exceptionally and for a limited time, and provided that information is provided in accordance with article 89 of the LOPDGDD. The person in charge, however, would not have sufficient legitimacy to install this system so that parents and/or legal guardians can view live images of the activities carried out by their children.

Personal data protection regulations do not prevent the dissemination of information relating to deceased persons. The minutes of the plenary sessions, with regard to the acts discussed, must be published in the electronic headquarters of the City Council without including specially protected data categories, or affecting honour or privacy or requiring special protection. In this case, the consent of those concerned should be made available so that the minutes can be disseminated, or the information anonymized should be disseminated. After 30 years, the provisions of Article 36 of Law 10/2001 may come into play. There is no legal basis for the dissemination, with a general scope, of the information contained in the municipal godparents of inhabitants on the city council website, without prejudice to the dissemination of the anonymized information of the godfather.

Since the regulation urges the Public Administration to facilitate the use of the "sense name" by trans persons (art. 23.1 Law 11/2014), the processing of this data is not excessive for the purposes of the principle of minimisation, and may be lawful if carried out on the legal basis of the consent of the person concerned. Treatment of the "sense name", as identifying data relating to a natural person's gender identity or expression, does not, in principle, involve processing data from special categories. The identification information of the person concerned must also be dealt with in official documents (DNI/NIE or passport), in order to ensure the identification and, among other things, the principle of the accuracy of the information and its traceability.

The hospital could communicate pseudonymized data relating to the health of patients treated with medicines for compassionate use in the pharmaceutical laboratory that facilitates the drug for clinical research purposes (Article 9.2.j) GDPR and paragraph 2.d) of DA 17a LOPDGDD) on the basis of the legitimate interest pursued by the laboratory.

Access to health data by a trained medical student - insofar as she is present at a medical visit - is in line with data protection regulations and also with health regulations from the moment the patient is informed of their presence and the patient gives verbal consent.

The City Council could create a register of the residents of the municipality who, given the concurrence of certain circumstances, would require a quick action by the civil protection forces in emergency situations. The use of data from the Register for this purpose would be compatible, but the incorporation of information relating to people's health would require their explicit consent.

File resolution dictated. The whistleblower complained that the department in which he worked sent him an SMS and a Whatsapp without him having authorized this treatment. RA is dictated on the basis of the consent and application of the treatment. The worker submitted two applications for compatibility with private activity on which the mobile phone was provided. After the period of suspension of his contract for very serious infringement, he asked for reinsertion in active service. In this context, he was sent an SMS notice notice of the resolution of the reinking request. And then, seeing that he had not rejoined the job, he was sent a whatsapp.

The whistleblower complained that a social worker had accessed information regarding her as a holder of guaranteed citizenship income (RGC), without her consent. Access took place during the processing of an individual school dining room grant, which had requested his exarella. Since the City Council had opened a social risk file of this family unit, in the processing of dining aid the City Council had to issue a social report with various information, including the income received by the family unit in RGC. In the RGC system, it was stated that the exparella was benefiting from RGC, and the denouncing person was the holder of the aid (who had requested it). The complaint is archived in the belief that the social worker accessed this information of the complainant, in office, and for the fulfilment of the tasks entrusted.