LawyerPrivate person

What happened

The DPA fined a controller €1,400 for not complying with an Article 15 GDPR access request and for failing to cooperate with the DPA, thus violating Article 31 GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal dataRead →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3) · 12(4) · 12(5)(b)Read →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
• Art. 15Right of access by the data subject15(1) · 15(3) · 15(4)Read →
• Art. 22Automated individual decision-making, including profiling22(1) · 22(4)Read →
• Art. 31Cooperation with the supervisory authorityRead →
• Art. 51Supervisory authorityRead →
• Art. 55CompetenceRead →
• Art. 58Powers58(2)(i)Read →
• Art. 83General conditions for imposing administrative fines83(2) · 83(4)(a) · 83(5)(b)Read →

• Data principles
• Data subject rights
• Transparency