Equifax Iberica, S.L.
€75,000
Insufficient fulfilment of data subjects rights
Decision Date
June 9, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Finance, Insurance and Consulting
Country
ES
Law
GDPRStatus
FINALDescription
The Data Subject has requested by e-mail the deletion of his data from the file of the National Association of Financial Credit Institutions ('ASNEF'). Equifax Iberica had replied that the exercise of the complainant's right was excessive due to an earlier request and that therefore the deletion would not be carried out. This was seen as a breach of data subjects rights for erasure under the GDPR as well as a breach of blocking obligations under national data protection laws.
Legal Citations
Art. 15
Issues & Violations
Insufficient fulfilment of data subjects rights