Enforcement
EN Company: Insufficient fulfilment of data subjects rights
€50,000 fine - Data Protection Authority of Niedersachsen
Content
The DPA of Niedersachsen has imposed a fine of EUR 50,000 on a company. The company sent out a newsletter by e-mail that could not be unsubscribed from due to technical malfunctions. Since the company had sent newsletters relatively frequently, this led to a significant number of unsolicited emails for some data subjects. Furthermore, the data subjects were also unable to lodge an objection via the company's website. In addition, the DPA found that the company did not sufficiently process some requests for access from data subjects.
GDPR Articles: Art. 15 GDPR, Art. 21 GDPR
Industry: Not assigned