17
Jan
The group headquarters' e-mail seemed unspectacular at first glance: "Please provide us with a complete list of all employees working at your company including details regarding age, entry date, position and remuneration by tomorrow, COB." The HR department addressed was able to quickly compile the list and sent it to headquarters without further inquiry. It was overlooked – as is often the case – that this transfer entails significant risks under European data protection law.
Data transfers between group companies...