Legal Person: Insufficient fulfilment of data subjects rights

The Czech DPA has imposed a fine of EUR 400 on a legal person. The accused did not provide access to information about the purpose of the processing, the storage period, the sources of the personal data, the possible recipients to whom the personal data have been or will be transferred, the right to request the controller to rectify or erase the personal data or to restrict or object to the processing and the right to lodge a complaint with a supervisory authority.

GDPR Articles: Art. 15 (1) GDPR
Industry: Media, Telecoms and Broadcasting