eCommerce 2020 ApS

€51,000

Insufficient legal basis for data processing

Fecha de la decisión

27 de junio de 2023

Autoridad

Icelandic data protection authority ('Persónuvernd')

IS

Sector

Finance, Insurance and Consulting

País

IS

Ley

GDPR

Estado

FINAL

Descripción

The Icelandic DPA has imposed a fine of EUR 51,000 on eCommerce 2020 ApS. The controller had submitted information on loan defaults for registration even though the required registration conditions for this have not been in place. For instance, unpaid small loans were registered although they were below the required minimum amount. In assessing the fine, the fact that a large number of people were affected by the incident and that the controller was pursuing profits were considered aggravating factors.

Citas legales

Art. 5 (1)Art. 6 (1)Art. 8Art. 9

Problemas e infracciones

Insufficient legal basis for data processing

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.