Two-Minute Recap Of Data Protection Law Matters Around The Globe

Huge Fine from  Finnish Authority

The Finnish Data Protection Authority  investigated an online retail company following  a complaint by a customer and subsequently  imposed an administrative fine of EUR 856,000.  It found that the company's data controller  required users to register as customers before  making purchases and did not allow purchases  through its website without the creation of a  customer account. The Authority also observed  that data relating to customer accounts were  stored indefinitely.

Spain's DPA  imposes multiple  fines

The Spanish Data Protection Authority fined  a telecom company EUR 56,000 for sharing  another customer's personal data when  responding to a customer's right of access  request. The data subject requested a copy of  their commercial telephone contract from the  company in 2021, claiming that the company  had not applied the tariff in the contract. The  company, however, sent the applicant an email  containing the