Details:

Summary The Data Subject has requested by e-mail the deletion of his data from the file of the National Association of Financial Credit Institutions (‘ASNEF’). Equifax Iberica had replied that the exercise of the complainant’s right was excessive due to an earlier request and that therefore the deletion would not be carried out. This was seen as a breach of data subjects rights for erasure under the GDPR as well as a breach of blocking obligations under national data protection laws.
Link: link
Related articles:  Art. 15 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 75,000
Sector Finance, Insurance and Consulting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law