Company

€1,600

Insufficient fulfilment of data subjects rights

Fecha de la decisión

4 de septiembre de 2023

Autoridad

Deputy Data Protection Ombudsman

Sector

Industry and Commerce

País

Ley

GDPR

Estado

FINAL

Descripción

The Finnish DPA has imposed a fine of EUR 1,600 on a company providing psychotherapy services. A customer had submitted a request for access to their stored personal data. However, the company had not informed the customer of the reason why the records of the psychotherapy sessions could not be provided.