Enforcement
EN Cosmopol Security S.p.A.: Insufficient fulfilment of data subjects rights
€20,000 fine - Italian Data Protection Authority (Garante)
Content
The Italian DPA has fined Cosmopol Security S.p.A. EUR 20,000. An individual had filed a complaint with the DPA against the controller. The individual had received invoices without ever having had a contractual relationship with the company. Therefore, the data subject requested information on the origin of their personal data. However, the controller did not respond to the data subject's request for information in a timely manner.
GDPR Articles: Art. 12 (3) GDPR, Art. 15 GDPR
Industry: Industry and Commerce