Bureau Krediet Registration ('BKR')
€830,000
Insufficient fulfilment of data subjects rights
Decision Date
July 6, 2020
Authority
Dutch Supervisory Authority for Data Protection (AP)
NL
Sector
Finance, Insurance and Consulting
Country
NL
Law
GDPRStatus
FINALDescription
BKR had required the payment of a fee when individuals requested access to their personal data and only provided access to their data once a year free of charge by post.
Legal Citations
Art. 12Art. 15
Issues & Violations
Insufficient fulfilment of data subjects rights