Not named in the source

What happened

In an Article 60 GDPR procedure, the DPA of Malta reprimanded a controller pursuant of Article 58(2)(b) GDPR) for requiring an ID-photo as identification method to exercise an access request. The DPA also ordered the controller to comply with the request pursuant of Article 58(2)(d) GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2)Read →
• Art. 15Right of access by the data subjectRead →
• Art. 58Powers58(2)(b) · 58(2)(d)Read →
• Art. 61Mutual assistanceRead →

• Data subject rights
• Transparency