# Credit Institution: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: National Commission for Data Protection (CNPD)
- Date: 2025-01-06
- Original: https://www.enforcementtracker.com/ETid-2615
- Canonical: https://overview.legal/posts/48730
- Topics: Supervisory Authorities, Controllers, Personal Data, Insurance, Law Enforcement, Processing Agreement, Data Controller

## Summary

The DPA of Luxembourg has issued a fine of EUR 175,000 on a Credit Institution. The controller failed to respond to information requests within the timeframe specified in Art. 12 (3) of the GDPR.

## Full text

The DPA of Luxembourg has issued a fine of EUR 175,000 on a Credit Institution. The controller failed to respond to information requests within the timeframe specified in Art. 12 (3) of the GDPR.

GDPR Articles: Art. 12 (3), (4) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48730 · 2026-08-22