Italy

Bper Banca S.p.A.

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-09-15.

Rank · Sector

#197

of 322 in Finance, Insurance and Consulting

Rank · Italy

#277

of 543

Rank · All fines

#1,374

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-09-15
Controller / Processor: Bper Banca S.p.A.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 12 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 10,000 on Bper Banca S.p.A.. An individual had filed a complaint with the DPA regarding the failure to fulfill their right to erasure of personal data. The individual had requested the bank to delete their personal data processed by the bank. The bank then asked the data subject to send their identification documents in order to verify their identity for the purpose of fulfilling their request. The data subject submitted their data, but did not receive a response to their request for deletion. For this reason, the DPA found that the Bank had violated Art. 12 GDPR by failing to respond to the request in a timely manner.

Open original source Links to the regulator's original publication or another source.