Germany

Debt collection service provider

900,000 €

GDPR enforcement action by Data Protection Authority of Hamburg on 2024-11-12.

Rank · Sector

#33

of 322 in Finance, Insurance and Consulting

Rank · Germany

#15

of 116

Rank · All fines

#188

of 3,050

Case details

Authority: Data Protection Authority of Hamburg
Date: 2024-11-12
Controller / Processor: Debt collection service provider
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Hamburg has imposed a fine of EUR 900,000 on a debt collection service provider. The company had unlawfully stored personal data (amounting to a six-digit number of data records) for up to five years after the erasure deadlines. The company admitted the violation, cooperated with the authorities and accepted the fine.

Open original source Links to the regulator's original publication or another source.