Details:
Summary | The Data Subject has requested by e-mail the deletion of his data from the file of the National Association of Financial Credit Institutions (‘ASNEF’). Equifax Iberica had replied that the exercise of the complainant’s right was excessive due to an earlier request and that therefore the deletion would not be carried out. This was seen as a breach of data subjects rights for erasure under the GDPR as well as a breach of blocking obligations under national data protection laws. |
Link: | link |
Related articles: | Art. 15 GDPR |
Type: | Insufficient fulfilment of data subjects rights |
Fine: | EUR 75,000 |
Sector | Finance, Insurance and Consulting |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/