GOKOAN EDUCATION, S. L.

What happened

The Spanish DPA decided that a controller could not require a data subject to identify themselves with their national ID, when this document had not been asked for in the first place. In this instance, the controller had no reason to doubt the identity of the data subject.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(6)Read →
• Art. 15Right of access by the data subjectRead →
• Art. 17Right to erasure (‘right to be forgotten’)Read →

• Data subject rights
• Transparency