Penalty for denied data disclosure
An employee requested data disclosure (see data subject rights) from his employer, a hospital. For this he sent a registered letter to the company. The company ignored the request.
After the complainant filed a complaint with the data protection authority. The hospital issued an opinion. An application for data disclosure had not been attached to the letter. At the hearing, the hospital, unlike the affected, did not participate.
The data protection authority closed the case and imposed a fine of 1,000 lev (about € 500, -) against the company.
Type of Issue:
violated duty to inform
Number of involved data records:
Special category of data involved: