Company

€1,600

Insufficient fulfilment of data subjects rights

Decision Date

4 de setembro de 2023

Authority

Deputy Data Protection Ombudsman

Sector

Industry and Commerce

Country

Law

GDPR

Status

FINAL

Description

The Finnish DPA has imposed a fine of EUR 1,600 on a company providing psychotherapy services. A customer had submitted a request for access to their stored personal data. However, the company had not informed the customer of the reason why the records of the psychotherapy sessions could not be provided.