Unnamed financial institution

€3,200

Insufficient fulfilment of data subjects rights

決定日期

2019年3月4日

權限

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

部門

Finance, Insurance and Consulting

國家

HU

法律

GDPR

狀態

FINAL

說明

The fine was imposed in relation to a data subject's request for data correction and erasure. NAIH levied a fine against an unnamed financial institution for unlawfully rejecting a customer’s request to have his phone number erased after arguing that it was in the company's legitimate interest to process this data in order to enforce a debt claim against the customer. In its decision, the NAIH emphasised that the customer’s phone number is not necessary for the purpose of debt collection because the creditor can also communicate with the debtor by post. Consequently, keeping the phone number of the debtor was against the principles of data minimisation and purpose limitation. As per the law, the assessed fine was based on 0.025% of the company's annual net revenue.

法律引文

Art. 5 (1)Art. 5 (1)Art. 13 (3)Art. 17 (1)Art. 6 (4)

問題與違規

Insufficient fulfilment of data subjects rights

保持最新的隱私權執法資訊

我們尊重您的隱私。每月一封電子郵件,無垃圾郵件,可隨時取消訂閱。