DPG Media Magazines B.V.
Insufficient fulfilment of data subjects rights
Datum odločitve
14. januar 2022
Organ
Dutch Supervisory Authority for Data Protection (AP)
NL
Sektor
Media, Telecoms and Broadcasting
Država
NL
Zakon
GDPRStatus
FINALOpis
The Dutch DPA has imposed a fine of EUR 525,000 on DPG Media Magazines B.V. The DPA had received several complaints regarding the way the controller handled requests from customers. Customers who wanted to know what kind of personal data the controller stored, or wanted to have their data deleted, first had to upload or send in proof of identity. The DPA determined that sending in proof of identity would not have been necessary for the purpose of processing the request. In addition, the mailing process presented an excessive hurdle for data subjects to exercise their rights.