Financial service provider

What happened

13 November: The DPA re-examined complaint about financial service provider’s incomplete response to data subject’s access request after appeal The DPA examined appeal against its decision, with which it had closed a case against the financial service provider Luminor Pank AS. The appellant complained that the company, in response to his access request, provided an incomplete dataset in English. The DPA found that much of the data that the complainant found as missing is data that the complainant is expected to possess. So, it concluded that the company is not obliged to provide data that the data subject already possesses under Articles 13(4) and 14(5) GDPR. Thus, the DPA found that the company has adequately fulfilled the obligation to inform the data subject of the data processing as required by Articles 13-15 GDPR. Finally, the DPA pointed out that the complainant had indicated in its customer profile a language preference to use English, which justifies the data export in English (Article 12(1) GDPR).

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 15Right of access by the data subjectRead →

• Data subject rights