DPG Media Magazines B.V.
Insufficient fulfilment of data subjects rights
Fecha de la decisión
14 de enero de 2022
Autoridad
Dutch Supervisory Authority for Data Protection (AP)
NL
Sector
Media, Telecoms and Broadcasting
País
NL
Ley
GDPREstado
FINALDescripción
The Dutch DPA has imposed a fine of EUR 525,000 on DPG Media Magazines B.V. The DPA had received several complaints regarding the way the controller handled requests from customers. Customers who wanted to know what kind of personal data the controller stored, or wanted to have their data deleted, first had to upload or send in proof of identity. The DPA determined that sending in proof of identity would not have been necessary for the purpose of processing the request. In addition, the mailing process presented an excessive hurdle for data subjects to exercise their rights.