Resolutions, opinions and reports search tool

The filing of the complaint is necessary for the following reasons: 1) It is accredited that no improper access has been made to the clinical history of the complainant. 2) In this case, it is considered that giving an extemporaneous response and requesting to fill in a specific form are management irregularities that do not have enough entity to start a sanctioning procedure.

In relation to the data published by the representative of a political party in a plenary session of the city council, it is archived because it has not been proven that the published data was provided by the City Council. Furthermore, the data published is incorrect, which is indicative of the fact that the person who provided it was not linked to the City Council. In relation to the leak of personal data through a WhatsApp group, this fact is also archived since the fact that the photographs of the squares (with shifts and schedules) have been exchanged in a WhatsApp group is not an indication sufficient to allow a violation of the principle of confidentiality to be attributed because it is not proven that the people in the group are members of the local police of the City Council.

Resolution is issued due to violation of the principle of confidentiality because a Consocio's collector, within the framework of a delegation of competences in matters of management and collection of taxes of the Bolvir City Council, sent emails to a wrong email address, linked to a particular, that contained personal data of taxpayers of the municipality of Bolvir.

A citizen accesses, through his personal folder to the electronic headquarters of the City Council, the documentation of a third person in relation to a file that has nothing to do with his complaint. The violation of the principle of confidentiality is alleged. The infringement of art is also proven. 25 RGPD, of technical measures from the design and by default, although, after a medial competition, it is only charged for the most serious infringement.

The Agency for the Housing of Catalonia is admonished for breach of the duty of confidentiality, for having communicated to a person (A) the erroneous renewal of another person's registration (B) in the Register of Housing Applicants with Official Protection of Catalonia. This error in turn stemmed from another mistake made by the municipal company under charge, which linked the request for renewal of A to the letter of B.

It resolves to admonish the ICS as being responsible for the infringement of the principle of confidentiality, since nursing staff would have accessed different clinical histories in an unjustified manner, and it resolves to archive the facts relating to certain accesses that are considered justified. It is also proposed that the entity take disciplinary action against the person responsible for improper access.

The complainant complains that the ITV station provided a third party with the ITV card of their vehicle. This was due to human error and the accused entity proceeded to take measures to correct the situation. Despite this, the registration of a vehicle is personal data and therefore constitutes a breach of data protection regulations.  The principle of confidentiality must be upheld.

The disclosure of data of a user of the Legal Orientation Service of the ICB is reported in a private law firm. ICAB responsibility has not been accredited.

It is decided to admonise the City Council of Tarragona since, in a call made by the person denouncing the Urban Guard of this City Council, he was collected personal data (name, surnames, DNI number and voice) and was not informed of the content provided in Article 13 GDPR. In addition, the city council is also credited with violating the principle of confidentiality since the Guardia Urbana informed the House denouncing that the "Seva Más" would have called, from the same home, to denounce the same facts. With regard to the collection of personal data, which the complainant considers excessive, it is appropriate to archive the facts since, according to the rules of administrative procedure, when a citizen submits a complaint, it must be identified.

The Department for Climate Action, Food and Rural Agenda notified the person denouncing a resolution addressed to a third person and containing personal data. It is decided to admonish the Department as the person responsible for a breach provided for in Article 83.5.a) in relation to Article 5.1.f), both of which are in the GDPR, for breach of the confidentiality principle.