Investment services provider

What happened

In an Article 60 GDPR procedure, the DPA of Malta reprimanded a controller (Article 58(2)(b) GDPR) for requesting the data subject to sign an agreement in order to process his erasure request. The controller also had to reply to the request (Article 58(2)(d) GDPR).

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1) · 12(3)Read →
• Art. 17Right to erasure (‘right to be forgotten’)17(1) · 17(3)Read →
• Art. 56Competence of the lead supervisory authorityRead →
• Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concernedRead →

• Data subject rights
• Transparency