Credit institution
€175,000
Insufficient fulfilment of data subjects rights
Decision Date
January 6, 2025
Authority
National Commission for Data Protection (CNPD)
LU
Sector
Finance, Insurance and Consulting
Country
HU
Law
GDPRStatus
FINALDescription
The DPA of Luxembourg has issued a fine of EUR 175,000 on a Credit Institution. The controller failed to respond to information requests within the timeframe specified in Art. 12 (3) of the GDPR.
Legal Citations
Art. 12 (3)
Issues & Violations
Insufficient fulfilment of data subjects rights