Enforcement·Information and Data Protection Commissioner (IDPC)EN
Export
Insurance company: Insufficient fulfilment of data subjects rights
The Malta Information and Data Protection Commissioner (IDPC) fined an unnamed insurance company €1,000 for insufficient fulfilment of data subjects' rights, citing violations of Article 5(2) and Article 21(2) GDPR.
StatusNot cited by any decision here yet
Summary
The enforcement action concerned the insurer's failure to adequately comply with its accountability obligations and its duty to properly handle data subjects' requests to object to processing.
We hold a reference to this item, not its text.
enforcementtracker.comRead at the sourceHow it connects
References
Related across sources
Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Oct 20, 2020 Privacy by Design & Default Privacy by Default Privacy by Design
C-667/21 ZQ v Medizinischer Dienst der Krankenversicherung Nordrhein, Körperschaft des öffentlichen Rechts The CJEU (Third Chamber) ruled on a preliminary reference from the Bundesarbeitsgericht in a case where ZQ sought compensation from his employer, Medizinischer Dienst der… CJEU ·Third Chamber Dec 21, 2023 Health Data Healthcare Integrity and Confidentiality Principle
Guidelines 1/2020 processing personal data in the context of connected vehicles and mobility related applications Guidelines on processing of personal data through video devices Guidelines ·EDPB Feb 7, 2020 Personal Data Privacy by Design & Default Privacy by Default
BA-6S/221/2019 Slovak court upholds €50,000 fine against Sociálna poisťovňa for sending sensitive data Sociálna poisťovňa, the social insurance agency (the controller), processes applications for foreign invalidity pensions and forwards related documents to the social insurance… Jun 25, 2025 Personal Data Integrity and Confidentiality Principle Data Breaches
C-807/21 Deutsche Wohnen SE v Staatsanwaltschaft Berlin C-807/21 (Deutsche Wohnen) CJEU Dec 5, 2023 Fines Liability IP Address
C-601/21 Meta Platforms and Others v Bundeskartellamt C-601/21 (Meta Platforms (Bundeskartellamt)) CJEU Jul 4, 2023 IP Address Accountability International Transfer