Debt collection company – Fine (Germany, 2022)

Fine
Bundesbeauftragter für den Datenschutz1 January 2022Germany
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A German debt collection company used investor data it received from an insolvent company's employee without proper legal grounds. The company also failed to inform investors about where their data came from. This case shows the need for transparency and a legal basis when handling personal data.

What happened

A debt collection company processed investor data without a legal basis and failed to inform them about the data's origin.

Who was affected

Investors whose data was used by the debt collection company.

What the authority found

The DPA found the company processed data without a required legal basis and did not provide necessary information to the investors.

Why this matters

This case underscores the importance of transparency and having a legal basis for data processing. Companies should inform individuals about how their data is obtained and ensure they comply with legal requirements.

GDPR Articles Cited

Art. 6(1) GDPR
Art. 14(1) GDPR
Full Legal Summary
Detailed

The DPA from Baden-Württemberg has imposed a fine on a debt collection company. The debt collection company had received investor information from an employee of an insolvent company, which it used to offer its services to assist the affected investors with insolvency claims. However, the DPA found that the company had processed the data without the required legal basis. In addition, the debt collection company failed to provide the data subjects with necessary information, such as the origin of their data.

Related Enforcement Actions (0)

No other enforcement actions found for Debt collection company in DE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2022

Authority

Bundesbeauftragter für den Datenschutz

Enforcement Tracker ID

ETid-1652

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Debt collection company - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: