Dutch DPA
- Country
- Netherlands
- Fine
- 830,000 EUR
- Date
- 2020-07-06
- Sector
- Public Sector
- Articles
- Art. 12(2)(5)Art. 15 GDPR
Too high barriers for the insight of your personal data.
From May 2018, BKR asked a fee for the digital retrieval of personal data. The AP is of the opninion that this is a violation of providing access to your personal data as mentioned in art. 12(5) GDPR. Also, people could only view their data once a year (by post) at no cost. The AP mentioned this is a violation of art. 15 GDPR because of a lack of facilitating the access of your personal data. That is why a fine of 830,000 euros has been imposed. After the investigation by the AP, BKR has adjusted the method. Since April 2019, people can digitally view their data at BKR for free. From March 2019, BKR has also adjusted the number of times that people can view their personal data by post.
Additional information
BKR has appealed to the court in this case. As a result, the decision of the AP on the fine to be imposed is not yet final.