Sanction RGPD Italian Data Protection Authority (Garante) — Bper Banca S.p.A. : 10 k€ (2022)
- Autorité de contrôle
- Italian Data Protection Authority (Garante)
- Pays
- Italie
- Entreprise / secteur
- Bper Banca S.p.A.
- Montant de l'amende
- 10 k€
- Date de la décision
- 15 septembre 2022
- Fondement juridique
- Art. 12
- Manquement
- Droits des personnes non respectés
Résumé des faits
The Italian DPA has imposed a fine of EUR 10,000 on Bper Banca S.p.A.. An individual had filed a complaint with the DPA regarding the failure to fulfill their right to erasure of personal data. The individual had requested the bank to delete their personal data processed by the bank. The bank then asked the data subject to send their identification documents in order to verify their identity for the purpose of fulfilling their request. The data subject submitted their data, but did not receive a response to their request for deletion. For this reason, the DPA found that the Bank had violated Art. 12 GDPR by failing to respond to the request in a timely manner.