Alektum Oy: Insufficient fulfilment of data subjects rights

The Finnish DPA has fined the debt collection company Alektum Oy EUR 750 000. The DPA opened an investigation against the controller after three people filed complaints against them. During its investigation, the DPA found that the controller had failed to respond at all or sufficiently to requests from data subjects regarding their data protection rights. The DPA also found that the controller had not sufficiently cooperated with the DPA.

GDPR Articles: Art. 12 (3) GDPR, Art. 15 (1), (3) GDPR
Industry: Finance, Insurance and Consulting