Tietosuojavaltuutetun toimisto (Finland) · 24 June 2021
Not named in the source
About: Processor obligations
FineNo fineViolation found
- Regulator
- Tietosuojavaltuutetun toimisto (Finland)
- Decided
- 24 June 2021
- Country
- Finland
- Sector
- Not given
- Regulator’s reference
- 2889/161/21
- Fino case number
- 2021/FI/011
What happened
The Finnish DPA found that a controller (X) and a processor (Y) had failed to enter into a data processing agreement pursuant to Article 28(3) GDPR. It decided not to impose a fine firstly because the data processing operations had already ended, and secondly due to the very low turnover of Y and the fact that it had already filed for bankruptcy.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 28Processor28(3)Read →
- Art. 58Powers58(2)(b)Read →
- Art. 83General conditions for imposing administrative finesRead →
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/FI/011.