Germany

Credit agency

—

GDPR enforcement action by Data Protection Authority of Berlin on 2022.

Case details

Authority: Data Protection Authority of Berlin
Date: 2022
Controller / Processor: Credit agency
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The DPA of Berlin imposed a fine on a credit agency. In the course of its investigation, the DPA found that the controller had stored 27 false addresses and 13 false dates of birth of a data subject for more than two years. The controller did not correct this data until the data subject submitted a request for information. However, the DPA also found that the information was provided late due to an internal error.

Open original source Links to the regulator's original publication or another source.