Back to Cases
technologyeducation · 2023
Universidade do Porto
CNPD found excessive retention of student and alumni records and incomplete transparency notices, implicating GDPR Articles 5 and 13.
Fine Imposed€90,000.0
Authority
Comissão Nacional de Proteção de Dados
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Universities need retention schedules that distinguish academic, alumni, and marketing purposes.