GDPR: the complainant's identity must remain confidential

The Spanish supervisory authority sanctioned a company that had communicated the identity of the complainants to the persons targeted by the complaint. Employees' complaint of harassment at work and the disclosure of their identity In April 2024, five employees of a company filed a complaint with their CSE for harassment at work against ten other employees. The CSE alerted the employer and ordered it to open an investigation. Once the investigat…