Almennri innheimtu ehf

€24,000

Insufficient legal basis for data processing

Lēmuma datums

2023. gada 27. jūnijs

Iestāde

Icelandic data protection authority ('Persónuvernd')

IS

Nozare

Finance, Insurance and Consulting

Valsts

IS

Likums

GDPR

Statuss

FINAL

Apraksts

The Icelandic DPA has imposed a fine of EUR 24,000 on Almennri innheimtu ehf. The controller had submitted information on loan defaults for registration even though the required registration conditions for this have not been in place. For instance, unpaid small loans were registered although they were below the required minimum amount. In assessing the fine, the fact that a large number of people were affected by the incident and that the controller was pursuing profits were considered aggravating factors.

Juridiskās atsauces

Art. 5 (1)Art. 6 (1)Art. 8Art. 9

Jautājumi un pārkāpumi

Insufficient legal basis for data processing

Atjauniniet informāciju par konfidencialitātes ieviešanu

Mēs respektējam jūsu konfidencialitāti. Viens e-pasts mēnesī, bez surogātpasta, jebkurā laikā varat atteikties no abonēšanas.