Sanction RGPD Data Protection Authority of Hamburg — Debt collection service provider : 900 k€ (2024)
- Autorité de contrôle
- Data Protection Authority of Hamburg
- Pays
- Allemagne
- Entreprise / secteur
- Debt collection service provider
- Montant de l'amende
- 900 k€
- Date de la décision
- 12 novembre 2024
- Fondement juridique
- Art. 5 (1) a), Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The DPA of Hamburg has imposed a fine of EUR 900,000 on a debt collection service provider. The company had unlawfully stored personal data (amounting to a six-digit number of data records) for up to five years after the erasure deadlines. The company admitted the violation, cooperated with the authorities and accepted the fine.