Not named in the source

What happened

The DPA found that a controller violated Article 17(1)(c) GDPR by failing to timely comply with an erasure request by a previous subscriber to its newsletter. Although the data were eventually deleted, the delay constituted an infringement.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
• Art. 13Information to be provided where personal data are collected from the data subjectRead →
• Art. 17Right to erasure (‘right to be forgotten’)17(1)(c)Read →
• Art. 21Right to object21(3)Read →

• Data subject rights
• Transparency