Datatilsynet (Denmark) - 2019-423-0202: Difference between revisions

From GDPRhub
No edit summary
No edit summary
Line 25: Line 25:
|GDPR_Article_1=Article 12(3) GDPR
|GDPR_Article_1=Article 12(3) GDPR
|GDPR_Article_Link_1=Article 12 GDPR#3
|GDPR_Article_Link_1=Article 12 GDPR#3
|GDPR_Article_2=Article 15(1)(h) GDPR
|GDPR_Article_2=Article 15 GDPR
|GDPR_Article_Link_2=Article 15 GDPR#1h
|GDPR_Article_Link_2=Article 15 GDPR
|GDPR_Article_3=Article 22(1) GDPR
|GDPR_Article_Link_3=Article 22 GDPR#1





Revision as of 11:14, 7 April 2020

Datatilsynet - 2019-423-0202
LogoDK.png
Authority: Datatilsynet (Denmark)
Jurisdiction: Denmark
Relevant Law: Article 12(3) GDPR
Article 15 GDPR
Type: Investigation
Outcome: Violation Found
Started:
Decided:
Published: 26.02.2020
Fine: None
Parties: n/a
National Case Number/Name: 2019-423-0202
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): Danish
Original Source: Datatilsynet (in DK) (in DA)
Initial Contributor: n/a

The Datatilsynet hold that Payment Denmark is making decisions based solely on automatic processing, as foreseen in 22 GDPR, and acte din breach of Article 15(1)(h) by not providsing the data subject with the necessary information on the existence of automatic decisions.

English Summary

Facts

xx

Dispute

xx

Holding

xx

Comment

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Danish original. Please refer to the Danish original for more details.

Summary

In 2019, the Data Inspectorate carried out a planned audit at the Municipality of Odense. The audit focused on the municipality's compliance with the rules on the data subject's right of access, cf. Articles 15 and 12 of the Data Protection Regulation.

On the basis of the audit, the Data Inspectorate has criticized the fact that Odense Municipality's processing of personal data did not take place in accordance with Article 12 (2) of the Regulation. Third

Among other things, the Data Inspectorate's final opinion states that the municipality of Odense's handling of access requests has generally been in accordance with Article 15 of the Regulation, but that the municipality has in three cases responded to a request for access later than one month after receiving the request.

You can read the Danish Data Protection Agency's guide on data subjects' rights here.
Decision

Odense Municipality was among the public authorities selected by the Danish Data Protection Agency for supervision in the spring of 2019.

At the request of the Data Inspectorate, the Municipality of Odense had completed a questionnaire before submitting the inspection and submitted this together with additional material to the audit. The inspection itself took place on May 20, 2019.