DPC (Ireland) · 7 March 2024
Apple
About: Data subject rights, Transparency, Unlawful processing
FineNo fineViolation found
- Regulator
- DPC (Ireland)
- Decided
- 7 March 2024
- Country
- Ireland
- Sector
- Not given
- Regulator’s reference
- Inquiry into Apple Distribution International Limited - March 2024
- Fino case number
- 2024/IE/009
What happened
The DPA found that Apple could retain a data subject's hashed email address as a security measure after receiving an erasure request. However, the DPA found Apple did not inform the data subject about such processing in violation of Article 13 GDPR.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processing6(1)(f)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(1)Read →
- Art. 17Right to erasure (‘right to be forgotten’)17(1)Read →
- Data subject rights
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/IE/009.