Poland: Fine for complicate data deletion for affected people
ClickQuickNow Sp.z o.o. has made the right to restrict data processing more difficult by intention. Therefore, data protection authority imposes a fine of € 47,000. No suitable technical and organizational measures (TOM) have been taken that allow simple and effective revocation of the consent or the execution of the right to deletion (“right to be forgotten”).
The data protection authority stated that the company made it explicitly more difficult to cancel the data processing in compare to give the consent to data processing. Furthermore, people were forced to give a reason, why the data processing should be stopped, which is not legal according to the GDPR.
The authority also stated, that the company made this process as complicated as possible by intention. ClickQuickNow also sent out contradictory information to the affected people.
Art des Verstoßes:
violated rights of the data subject
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
12. Transparent information, communication and modalities for the exercise of the rights of the data subject
7. Conditions for consent
Press release of UODO (polish data protection authority)