Spain

Equifax Iberica, S.L.

75,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-06-09.

Rank · Sector

#104

of 322 in Finance, Insurance and Consulting

Rank · Spain

#133

of 1,075

Rank · All fines

#553

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-06-09
Controller / Processor: Equifax Iberica, S.L.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Data Subject has requested by e-mail the deletion of his data from the file of the National Association of Financial Credit Institutions ("ASNEF"). Equifax Iberica had replied that the exercise of the complainant's right was excessive due to an earlier request and that therefore the deletion would not be carried out. This was seen as a breach of data subjects rights for erasure under the GDPR as well as a breach of blocking obligations under national data protection laws.

Open original source Links to the regulator's original publication or another source.