Not named in the source

What happened

The Belgian DPA held that in this specific case, concerning a father and mother sharing parental authority, the request to have data about the child erased, introduced by the father alone, had not been submitted in a way that could be accepted. The Belgian DPA also found several other violations of the GDPR by the controller.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 6Lawfulness of processing6(1)(e) · 6(3)Read →
• Art. 13Information to be provided where personal data are collected from the data subject13(1)(a) · 13(1)(b)Read →
• Art. 25Data protection by design and by default25(1) · 25(2)Read →

• Accountability
• Transparency
• Unlawful processing