Icelandic data protection authority ('Persónuvernd') · 27 June 2023
Creditinfo Lánstraust hf.
Insufficient legal basis for data processing
- Regulator
- Icelandic data protection authority ('Persónuvernd')
- Decided
- 27 June 2023
- Country
- Iceland
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/IS/007
What happened
The Icelandic DPA held that a credit scoring company that registered information on non-payments without meeting the conditions for registration being fulfilled according to the operational license of the said company, breached the principle of lawfulness, fairness and transparency under Article 5(1)(a) GDPR. The company was fined 37,856,900 ISK (approx. €257,660).
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IS/007.