Lensway

What happened

In the context of an erasure request, requiring copy of identity documents which are not strictly necessary to identify a data subject breaches Article 12(6) GDPR. Moreover, in these cases, the use of regular mail does not facilitate the exercise of data subjects' right under Article 12(2) GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2) · 12(6)Read →
• Art. 17Right to erasure (‘right to be forgotten’)Read →
• Art. 56Competence of the lead supervisory authorityRead →
• Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concernedRead →

• Data subject rights
• Transparency