Sanction RGPD Austrian Data Protection Authority (dsb) — Address Broker : 500 k€ (2021)
- Autorité de contrôle
- Austrian Data Protection Authority (dsb)
- Pays
- Autriche
- Entreprise / secteur
- Address Broker
- Montant de l'amende
- 500 k€
- Date de la décision
- 28 septembre 2021
- Fondement juridique
- Art. 12
- Manquement
- Droits des personnes non respectés
Résumé des faits
The Austrian DPA has imposed a fine of EUR 500,000 on an address broker. The controller provided a form for data subjects to exercise their rights. The controller regularly did not allow data subjects to exercise their rights in another way, always referring them to the form. Only when a data subject actively refused to use the form did the controller respond to requests to exercise data subjects rights which did not use the form. The DPA decided that this limited the exercise of data subjects' rights in a way that was not compatible with Art. 12 GDPR, and issued a fine of EUR 500,000. The controller appealed against the decision to the Austrian Federal Administrative Court, which dismissed the appeal.