The Netherlands

DPG Media Magazines B.V.

525,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2022-01-14.

Rank · Sector

#64

of 366 in Media, Telecoms and Broadcasting

Rank · The Netherlands

#17

of 43

Rank · All fines

#231

of 3,042

Case details

Authority: Dutch Supervisory Authority for Data Protection (AP)
Date: 2022-01-14
Controller / Processor: DPG Media Magazines B.V.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 12 (2) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Dutch DPA has imposed a fine of EUR 525,000 on DPG Media Magazines B.V.

The DPA had received several complaints regarding the way the controller handled requests from customers.

Customers who wanted to know what kind of personal data the controller stored, or wanted to have their data deleted, first had to upload or send in proof of identity.

The DPA determined that sending in proof of identity would not have been necessary for the purpose of processing the request. In addition, the mailing process presented an excessive hurdle for data subjects to exercise their rights.

Open original source Links to the regulator's original publication or another source.