Bper Banca S.p.A.
Insufficient fulfilment of data subjects rights
決定日
2022年9月15日
権威
Italian Data Protection Authority (Garante)
IT
セクター
Finance, Insurance and Consulting
国名
IT
法律
GDPRステータス
FINAL説明
The Italian DPA has imposed a fine of EUR 10,000 on Bper Banca S.p.A.. An individual had filed a complaint with the DPA regarding the failure to fulfill their right to erasure of personal data. The individual had requested the bank to delete their personal data processed by the bank. The bank then asked the data subject to send their identification documents in order to verify their identity for the purpose of fulfilling their request. The data subject submitted their data, but did not receive a response to their request for deletion. For this reason, the DPA found that the Bank had violated Art. 12 GDPR by failing to respond to the request in a timely manner.