Enforcing jurisdiction
Cyprus · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

GAIJIN NETWORK LTD – Complaint Upheld (Cyprus, 2020)

Complaint Upheld
DPA Commissioner2 June 2020Cyprus
final
Complaint Upheld

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A complaint against Gaijin Network Ltd was upheld because the company couldn't erase a user's data due to missing authentication information. This ruling matters because it stresses the need for companies to improve how they handle data erasure requests.

What happened

The company rejected a user's request to erase personal data because the user did not provide necessary identification.

Who was affected

The user who requested the erasure of their personal data from Gaijin Network Ltd.

What the authority found

The authority found that the company's rejection of the erasure request was lawful but highlighted the need for better processes.

Why this matters

This case emphasizes that companies must have clear and effective methods for users to exercise their rights regarding personal data, especially for those with compromised accounts.

Recorded legal citations
Automatically processed
Art. 17 GDPR
Art. 12(2) GDPR
Art. 12(6) GDPR
Art. 58(2)(d) GDPR
View original scraped data
Art. 12(2) GDPR
Art. 12(6) GDPR
Art. 17(GDPR)
Art. 58(2)(d) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 21 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A data subject made a request for erasure of his personal data to a video game provider, Gaijin Netword Ltd. Gaijin requested additional information in order to identify the data subject. The data subject failed to provide the authentication information and Gaijin rejected the request. Was the rejection of the data subject's request for rectification as well as the company's request for additional identification information lawful? The Comissioner found that in this particular case Gaijin could not comply with the request for erasure as authentication information was missing. However, Gaijin should implement additional modalities to facilitate the exercise of data subjects' rights. The current Gaijin's modalities do not fully comply with the GDPR and additional mechanisms should be implemented so that users with hacked accounts could be also identified according to Article 12(6) GDPR.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for GAIJIN NETWORK LTD in CY

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

2 June 2020

Authority

DPA Commissioner

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. GAIJIN NETWORK LTD - Cyprus (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: