Back to Cases
technologyeducation · 2022
Stockholm School of Economics
IMY sanctioned the school for retaining student and alumni personal data longer than necessary and for incomplete information notices, implicating GDPR Articles 5, 13 and 14.
Fine Imposed€180,000.0
Regulation
Key Takeaways
- Educational institutions need retention schedules tied to clear academic purposes.