Broker

What happened

The DPA found that a data subject’s consent to the processing of their health data by an insurance broker was not freely given since the consent was a condition for a discount on a mortgage’s interest rate.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(11)Read →
• Art. 9Processing of special categories of personal data9(2)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 16Right to rectificationRead →
• Art. 22Automated individual decision-making, including profilingRead →
• Art. 24Responsibility of the controllerRead →
• Art. 32Security of processingRead →

• Accountability
• Data security
• Data subject rights
• Special categories
• Transparency