Bper Banca S.p.A.
Insufficient fulfilment of data subjects rights
تاريخ القرار
15 سبتمبر 2022
الهيئة
Italian Data Protection Authority (Garante)
IT
القطاع
Finance, Insurance and Consulting
البلد
IT
القانون
GDPRالحالة
FINALالوصف
The Italian DPA has imposed a fine of EUR 10,000 on Bper Banca S.p.A.. An individual had filed a complaint with the DPA regarding the failure to fulfill their right to erasure of personal data. The individual had requested the bank to delete their personal data processed by the bank. The bank then asked the data subject to send their identification documents in order to verify their identity for the purpose of fulfilling their request. The data subject submitted their data, but did not receive a response to their request for deletion. For this reason, the DPA found that the Bank had violated Art. 12 GDPR by failing to respond to the request in a timely manner.