Unnamed financial institution

€3,200

Insufficient fulfilment of data subjects rights

결정 날짜

2019년 3월 4일

권한

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

섹터

Finance, Insurance and Consulting

국가

HU

법률

GDPR

상태

FINAL

설명

The fine was imposed in relation to a data subject's request for data correction and erasure. NAIH levied a fine against an unnamed financial institution for unlawfully rejecting a customer’s request to have his phone number erased after arguing that it was in the company's legitimate interest to process this data in order to enforce a debt claim against the customer. In its decision, the NAIH emphasised that the customer’s phone number is not necessary for the purpose of debt collection because the creditor can also communicate with the debtor by post. Consequently, keeping the phone number of the debtor was against the principles of data minimisation and purpose limitation. As per the law, the assessed fine was based on 0.025% of the company's annual net revenue.

법적 인용

Art. 5 (1)Art. 5 (1)Art. 13 (3)Art. 17 (1)Art. 6 (4)

문제 및 위반 사항

Insufficient fulfilment of data subjects rights

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.