Enforcement
EN Debt collection service provider: Insufficient legal basis for data processing
€900,000 fine - Data Protection Authority of Hamburg
Content
The DPA of Hamburg has imposed a fine of EUR 900,000 on a debt collection service provider. The company had unlawfully stored personal data (amounting to a six-digit number of data records) for up to five years after the erasure deadlines. The company admitted the violation, cooperated with the authorities and accepted the fine.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Finance, Insurance and Consulting