DPG Media Magazines B.V.
Insufficient fulfilment of data subjects rights
Ημερομηνία απόφασης
14 Ιανουαρίου 2022
Αρχή
Dutch Supervisory Authority for Data Protection (AP)
NL
Τομέας
Media, Telecoms and Broadcasting
Χώρα
NL
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Dutch DPA has imposed a fine of EUR 525,000 on DPG Media Magazines B.V. The DPA had received several complaints regarding the way the controller handled requests from customers. Customers who wanted to know what kind of personal data the controller stored, or wanted to have their data deleted, first had to upload or send in proof of identity. The DPA determined that sending in proof of identity would not have been necessary for the purpose of processing the request. In addition, the mailing process presented an excessive hurdle for data subjects to exercise their rights.